[167793] in North American Network Operators' Group
Re: The state of TACACS+
daemon@ATHENA.MIT.EDU (Javier Henderson)
Mon Dec 30 09:11:52 2013
From: Javier Henderson <javier@kjsl.org>
In-Reply-To: <alpine.BSF.2.00.1312301459380.27797@pohjola.cksoft.de>
Date: Mon, 30 Dec 2013 09:11:40 -0500
To: Christian Kratzer <ck@cksoft.de>
Cc: nanog list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Dec 30, 2013, at 9:01 AM, Christian Kratzer <ck-lists@cksoft.de> wrote:
> Hi,
>
> On Mon, 30 Dec 2013, Christopher Morrow wrote:
>> I don't think radius nor kerberos nor ssh with certificates supports
>> command authorization, do they?
>
> it is with radius afaik ...
RADIUS does not support command authorization or accounting.
-jav