RE: What are you guys doing for tacacs+ in 2026?

[Drew Weaver via NANOG <nanog () lists nanog org>]

I’m not using tcp_wrappers I was just trying to build something that needed it but I think I already figured it out by 
looking through the rpm spec.

Thanks,
-Drew

From: Jonathan Lassoff <jof () thejof com>
Sent: Tuesday, February 10, 2026 10:19 AM
To: North American Network Operators Group <nanog () lists nanog org>
Cc: Drew Weaver <drew.weaver () thenap com>
Subject: Re: What are you guys doing for tacacs+ in 2026?

tcp_ wrappers is pretty dated.

Maybe move to using iptables/netfilter?

In terms of newer software for TACACS+, Tacquito is decent:
https://github.com/facebookincubator/tacquito<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_facebookincubator_tacquito&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=OPufM5oSy-PFpzfoijO_w76wskMALE1o4LtA3tMGmuw&m=90gkWo7kVvejNfQmbLf_nFPFontgjwZKPouPX5uiacioaXD-_bMHfdM33Lcqw__U&s=ybBxdKkTMKSgZ2NISFsLGJr0XjF6IDw8GhDlqAKs-TE&e=>

Cheers,
jof

On Tue, Feb 10, 2026 at 07:08 Drew Weaver via NANOG <nanog () lists nanog org<mailto:nanog () lists nanog org>> wrote:
Howdy.

I imagine that this is an issue that has come up before but I am having an issue finding how anyone else handled it. 
(Unless everyone is still running tac_plus on RHEL7)

I'm trying to migrate some tac plus instances to a new Linux distro that apparently doesn't support tcp_wrappers and 
I'm having trouble both compiling it and making an RPM for it.

I've tried both the original 
https://www.shrubbery.net/tac_plus/<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.shrubbery.net_tac-5Fplus_&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=OPufM5oSy-PFpzfoijO_w76wskMALE1o4LtA3tMGmuw&m=90gkWo7kVvejNfQmbLf_nFPFontgjwZKPouPX5uiacioaXD-_bMHfdM33Lcqw__U&s=CUPi5Wn7hd7zYDhi1qioan7i57kWReHINdlM0ucfY88&e=>
 and the now sadly abandoned Facebook version 
https://github.com/facebook/tac_plus<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_facebook_tac-5Fplus&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=OPufM5oSy-PFpzfoijO_w76wskMALE1o4LtA3tMGmuw&m=90gkWo7kVvejNfQmbLf_nFPFontgjwZKPouPX5uiacioaXD-_bMHfdM33Lcqw__U&s=WJ8j1UZ8sWNBISASDX1LY9ARye35p7KTb2R6taHMQPg&e=>

If there is another tacacs+ solution everyone has moved to that I am unaware of please enlighten me.

Thank you,
-Drew



_______________________________________________
NANOG mailing list
https://lists.nanog.org/archives/list/nanog () lists nanog 
org/message/REGURCJX4QAEZOEORGRO7TLFKTY36QPW/<https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.nanog.org_archives_list_nanog-40lists.nanog.org_message_REGURCJX4QAEZOEORGRO7TLFKTY36QPW_&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=OPufM5oSy-PFpzfoijO_w76wskMALE1o4LtA3tMGmuw&m=90gkWo7kVvejNfQmbLf_nFPFontgjwZKPouPX5uiacioaXD-_bMHfdM33Lcqw__U&s=fL7ogmT5d3L0djXXI3eqTQn9o83WqARlxY3wkq4iEi0&e=>
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/43CCLR2S7FT7YXJ3IZWKAHSBVIMQAODH/