topic Re: Tacacs+ Configuration - Server Configuration in ZoneDirector

Tacacs+ Configuration - Server Configuration

dave_hackenberg — Wed, 18 Dec 2013 19:51:11 GMT

I am configuring AAA using Tacacs. Authentication works, however, I do not have access to the "Configure" tab in the GUI and the Dashboard is blank. I am guessing this is an issue with the user's configuration in the Tacacs configuration file on the server. Does anyone know what changes need to be made on the Tacacs server?

Re: Tacacs+ Configuration - Server Configuration

keith_redfield — Fri, 20 Dec 2013 16:58:17 GMT

Hi Dave,

This is not my area of expertise but I did some poking around and found this which looks relevant:

Depending on the privilege level supplied by the TACACS+ server, the

login user is authorized as

a.) Super Admin (Perform all configuration and management tasks on ZD)

(priv-lvl > 2 ( 3 - 15 ) )

b.) Operator Admin (Configure services, but no Admin privilege on ZD, e.g. cannot change logins on ZD)

(priv-lvl = 2)

c.) Monitoring Admin (Monitoring and viewing operational status only)

(priv-lvl = 1)
----

Hope this helps.

Re: Tacacs+ Configuration - Server Configuration

alex_peruyera — Tue, 01 Apr 2014 21:02:30 GMT

I have my admins set at priv-lvl 15 in Tacacs, yet they still have the greyed out config section, any other config changes I need to make here?

Re: Tacacs+ Configuration - Server Configuration

anthony_anyoti — Thu, 05 Nov 2015 09:01:02 GMT

Hi-I would like to know if there was an answer for this, I have the exact same scenario but all users do not have access to the configure tab despite having pirv-lvl 15 on my tacacs server.

Re: Tacacs+ Configuration - Server Configuration

nuno_pimentel — Fri, 06 Nov 2015 11:57:53 GMT

Anthony , and the rest, what you put on the ZD in Tacacs+ service field??

Re: Tacacs+ Configuration - Server Configuration

anthony_anyoti — Mon, 16 Nov 2015 12:39:43 GMT

Hi DSE,

Under Tacacs Service* = Authentication, Authorization, Accounting

Regards
Anthony