LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices



Reply
 
Search this Thread
Old 09-18-2013, 11:24 AM   #1
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,121

Rep: Reputation: 58
Linux Client To Authenticate using TACACS


I have customer who controls access to the internet via TACACS server, basically a PIX firewall uses authentication from the TACACS to say if traffic is allowed to pass out of the gateway. I canít find anything on how to configure a linux client of TACACS authentication only how to set up a linux TACACS server.
 
Old 09-18-2013, 12:37 PM   #2
baldy3105
Member
 
Registered: Jan 2003
Location: Cambridgeshire, UK
Distribution: Mint (Desktop), Debian (Server)
Posts: 876

Rep: Reputation: 184Reputation: 184
For authentication you have supplicant, authenticator and an authentication server. The supplicant is the user and their PC tablet etc, the authenticator is the Firewall and the Authentication server is the TACAC's server.

TACACS protocol is used to pass information between the Authenticator and the Authenication Server. The interaction between the supplicant and the authenticator will be something else. It could be web based auth where the firewall presents a login server, or some method of providing credentials via http, whatever. You most likley need your linux client to emulate the supplicant->authenticator mechanism, not TACACS.
 
Old 09-18-2013, 04:41 PM   #3
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,121

Original Poster
Rep: Reputation: 58
thank you for the reply. What clients are there? This is about the closest that I have come:

http://serverfault.com/questions/425...cacs-cisco-acs
 
Old 09-19-2013, 03:34 PM   #4
baldy3105
Member
 
Registered: Jan 2003
Location: Cambridgeshire, UK
Distribution: Mint (Desktop), Debian (Server)
Posts: 876

Rep: Reputation: 184Reputation: 184
What I'm saying is I don't think you need a TACACs client. I think you need to know what the authentication mechanism is that is used between user and firewall. TACACs operates between Firewall and Auth Server, i.e its a backend process, not something a client would typically interact with directly. You need to know how the PC users are authenticating. Is it a web page they get presented with asking for credentials? Or is it like the password info configure in proxy settings?

i.e. user hits the firewall via HTTP and gets presented with a user/pass screen. User responds, effectively providing credentials via HTTP Post. Its the firewall that then requests via TACACS, authentication of that user from the Auth Server.

Authenticating yourself directly to the TACACS server might be a good test that TACACS is working, but doesn't acheive what you need which is to inform the Firewall that you are allowed through. You see you cut the Firewall out of the process?

You need to find out how users from their PC's provide authentication to the firewall. There are many ways of doing this and you would need to know which it is.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux client to authenticate against Active directory using LDAP paul_mat Linux - Server 2 01-29-2008 08:17 PM
getting a linux client to authenticate against OpenLDAP server mars_fun_size Linux - Software 1 03-15-2007 04:22 AM
cannot authenticate to AD after Kerberos client install bret Linux - Security 4 02-02-2006 06:14 PM
How to make Samba server authenticate Linux client? Niceman2005 Linux - Networking 1 11-27-2004 03:35 PM
Linux login using Tacacs mikeclarke99 Linux - Security 1 06-07-2003 08:04 AM


All times are GMT -5. The time now is 04:28 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration