I am configuring AAA using Tacacs. Authentication works, however, I do not have access to the "Configure" tab in the GUI and the Dashboard is blank. I am guessing this is an issue with the user's configuration in the Tacacs configuration file on the server. Does anyone know what changes need to be made on the Tacacs server?
- 2 Posts
- 0 Reply Likes
Posted 5 years ago
- 860 Posts
- 51 Reply Likes
Hi Dave,
This is not my area of expertise but I did some poking around and found this which looks relevant:
Depending on the privilege level supplied by the TACACS+ server, the
login user is authorized as
a.) Super Admin (Perform all configuration and management tasks on ZD)
(priv-lvl > 2 ( 3 - 15 ) )
b.) Operator Admin (Configure services, but no Admin privilege on ZD, e.g. cannot change logins on ZD)
(priv-lvl = 2)
c.) Monitoring Admin (Monitoring and viewing operational status only)
(priv-lvl = 1)
----
Hope this helps.
This is not my area of expertise but I did some poking around and found this which looks relevant:
Depending on the privilege level supplied by the TACACS+ server, the
login user is authorized as
a.) Super Admin (Perform all configuration and management tasks on ZD)
(priv-lvl > 2 ( 3 - 15 ) )
b.) Operator Admin (Configure services, but no Admin privilege on ZD, e.g. cannot change logins on ZD)
(priv-lvl = 2)
c.) Monitoring Admin (Monitoring and viewing operational status only)
(priv-lvl = 1)
----
Hope this helps.
- 1 Post
- 0 Reply Likes
I have my admins set at priv-lvl 15 in Tacacs, yet they still have the greyed out config section, any other config changes I need to make here?
- 11 Posts
- 0 Reply Likes
Hi-I would like to know if there was an answer for this, I have the exact same scenario but all users do not have access to the configure tab despite having pirv-lvl 15 on my tacacs server.
- 66 Posts
- 3 Reply Likes
Anthony , and the rest, what you put on the ZD in Tacacs+ service field??
- 11 Posts
- 0 Reply Likes
Hi DSE,
Under Tacacs Service* = Authentication, Authorization, Accounting
Regards
Anthony
Under Tacacs Service* = Authentication, Authorization, Accounting
Regards
Anthony
Related Categories
-
ZoneDirector
- 2438 Conversations
- 676 Followers