nanog mailing list archives

Re: What are you guys doing for tacacs+ in 2026?


From: Saku Ytti via NANOG <nanog () lists nanog org>
Date: Wed, 11 Feb 2026 10:29:24 +0200

You are making a big ask Elmar, by your absolutely wild rationale,
hope it'll pay out :)

On Wed, 11 Feb 2026 at 10:08, Elmar K. Bins via NANOG
<nanog () lists nanog org> wrote:

Yeah, well, turns out I'm too stupid to check recipients before sending.
Please let's not start an OS war...

Elmar.

nanog () lists nanog org (Elmar K. Bins via NANOG) wrote:

Hi Drew, I'll answer in private to not reincinerate the OS wars.
We're running tac_plus, and have been since... forever.
We have not painted ourselves into a corner by using Linux, though.
FreeBSD has a still-maintained package which works well; it needs a restart
every two months or so, but is happy otherwise.

I know this won't help you much, except maybe to think a bit outside the Linux box.

Cheers,
    Elmar.

nanog () lists nanog org (Drew Weaver via NANOG) wrote:

Howdy.

I imagine that this is an issue that has come up before but I am having an issue finding how anyone else handled 
it. (Unless everyone is still running tac_plus on RHEL7)

I'm trying to migrate some tac plus instances to a new Linux distro that apparently doesn't support tcp_wrappers 
and I'm having trouble both compiling it and making an RPM for it.

I've tried both the original https://www.shrubbery.net/tac_plus/ and the now sadly abandoned Facebook version 
https://github.com/facebook/tac_plus

If there is another tacacs+ solution everyone has moved to that I am unaware of please enlighten me.

Thank you,
-Drew
_______________________________________________
NANOG mailing list
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/H4EIWLBDDXVRVZQXCGC43BZPYSACVKSP/



-- 
  ++ytti
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/V2FPMMDU73NDFT4CU456B3D7J5XIVCY2/


Current thread: