# How to install TACACS+ on Linux CentOS

**URL:** https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010
**Category:** Lessons Discussion
**Created:** [December 26, 2016, 6:06pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010 "2016-12-26T18:06:37Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 26, 2016, 6:06pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/1 "2016-12-26T18:06:37Z")

</div>

This topic is to discuss the following lesson:

> **[How to install TACACS+ on Linux CentOS](https://networklessons.com/security/how-to-install-tacacs-on-linux-centos)**
>
> TACACS+ brings authentication, authorization and accounting for Network Devices. This lesson explains TACACS+ on Linux CentOS.

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [July 26, 2013, 11:17am UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/2 "2013-07-26T11:17:35Z")

</div>

No package tac\_plus available. (Centos 6.4)  
Funny, since I can see via web that it’s there.

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [July 29, 2013, 2:23pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/3 "2013-07-29T14:23:18Z")

</div>

Hmm are you sure it’s using the Nux repository? you can always just grab the RPM and install it manually…

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [September 14, 2013, 12:00am UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/4 "2013-09-14T00:00:41Z")

</div>

Same here. “No package tac\_plus available”. I can also see it in the list. Cannot install it manually, as there are too many dependencies (which is why we use yum. haha)

I, too, am using Centos 6.4. If I do just a yum list, it does not show it.

[root@logger ~]# yum list --enablerepo=nux-misc | grep nux-miscanything-sync-daemon.noarch 3.11-3.el6.nux nux-misc  
chronicle.noarch 4.6-1.el6.nux nux-misc  
clamassassin.noarch 1.2.4-1.el6.nux nux-misc  
cobbler.noarch 2.2.1-2.el6.nux nux-misc  
cobbler-web.noarch 2.2.1-2.el6.nux nux-misc  
dkimproxy.noarch 1.4.1-1.el6.nux nux-misc  
fuse-s3fs.noarch 0.9-2.el6.nux nux-misc  
koan.noarch 2.2.1-2.el6.nux nux-misc  
megactl.i686 0.4.1-1.el6.nux nux-misc  
megactl-debuginfo.i686 0.4.1-1.el6.nux nux-misc  
openresolv.noarch 3.4.1-2.el6.nux nux-misc  
perl-Apache-RPC.noarch 0.69-2.el6.nux nux-misc  
perl-RPC-XML.noarch 0.69-2.el6.nux nux-misc  
perl-XML-RSSLite.noarch 0.15-1.el6.rf nux-misc  
pssh.noarch 2.3.1-4.el6.nux nux-misc  
z-push.noarch 1.5.6-1.el6.nux nux-misc  
zarafa-z-push.noarch 1.5.6-1.el6.nux nux-misc

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [September 15, 2013, 7:03pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/5 "2013-09-15T19:03:49Z")

</div>

Are you sure the nux repository is enabled? You can see at the following URL that it has the tacacs package:

> **[Coreix Mirrors](http://mirrors.coreix.net/li.nux.ro//nux/misc/el6/x86_64/)**

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [September 26, 2013, 2:02pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/6 "2013-09-26T14:02:19Z")

</div>

Hey ,  
Great post. I got this working.

Although i few problems and questions

First, whenever i put default service = permit and privilege command in the config i cannot get the damon to start it fails.  
Second, if i use just login with PAM i get to the user level \> but i need exec level access to provide. How can i go about doing that.

Thanks

Neil

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [January 6, 2014, 11:54am UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/7 "2014-01-06T11:54:00Z")

</div>

Don’t forget to configure your firewall to allow TCP port 49 for tac\_plus.

Dear Sir,

The firewall you are saying here is the Linux firewall or the Network firewall.  
I will use it on the LAN network

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [January 8, 2014, 1:56pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/8 "2014-01-08T13:56:44Z")

</div>

I am having same issue. I am authenticating with file. but cant go to conf t. mode. Any help ???  
Authentication working but not the autherizaton

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [January 14, 2014, 4:33pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/9 "2014-01-14T16:33:07Z")

</div>

It could be both, most linux servers use iptables as the firewall so that’s something to consider at least.

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [February 1, 2014, 3:34am UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/10 "2014-02-01T03:34:03Z")

</div>

Nice post…

But, I’m having some troubles, when I try to authenticate with a user (i.e. ntorres), got this message:

Enter your Unix username and password, Username: ntorres  
Password:

% Authentication failed

Enter your Unix username and password, Username:

Is there any log where I can see??

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [February 3, 2014, 8:58am UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/11 "2014-02-03T08:58:08Z")

</div>

You can check the /var/log folder on the Linux server for debug messages there, you might have to check the config file to see which log file it uses. On the router you can use the debug aaa commands to see what is going on.

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [February 10, 2014, 4:05am UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/12 "2014-02-10T04:05:23Z")

</div>

Great post and very helpful. Thanks, I have successfully implemented Tacacs+ server. The routers are working well but I am having problem with firewall command authorization. It seems no matter it wants to give me the privilege level more than 1 🙂

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [March 3, 2014, 6:33am UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/13 "2014-03-03T06:33:30Z")

</div>

Hi Rene,  
Is GUI available post configuration?  
To debug or add users can be helpful.  
Thanks

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [March 5, 2014, 9:48am UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/14 "2014-03-05T09:48:46Z")

</div>

HI,  
I used CentOS 6.5, TACACS + is running, but in /var/log/tac\_plus.acct log file is still empty  
had setting /etc/tac\_plus.conf  
accounting file = /var/log/tac\_plus.acct

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [March 10, 2014, 1:23pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/15 "2014-03-10T13:23:00Z")

</div>

I’m not sure, I have only used the CLI version myself.

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [March 14, 2014, 8:19am UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/16 "2014-03-14T08:19:59Z")

</div>

Hi,

Any Idea how to enforce password changing at first logon using tacacs+ PAM authentication ?

I am able to login using the Tacacs+ Pam authentication successfully.

---

<div class="post-metadata">

### Author: ![system](https://cdn-forum.networklessons.com/uploads/default/original/1X/1d2ef66728c7fbac8377748594345a3f474fce5f.png) [@system](https://forum.networklessons.com/u/system)
#### Post date: [July 14, 2014, 8:52pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/17 "2014-07-14T20:52:57Z")

</div>

Is there a way to make it work for ipv6 ? I’ve tried all possibilities with no luck !!! hope you have experimented it before !

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [July 31, 2014, 2:10pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/18 "2014-07-31T14:10:35Z")

</div>

I took a quick look and it seems it’s possible but I never tried it myself before…

---

<div class="post-metadata">

### Author: ![nelsonjose25](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/n/3e96dc/32.png) [@nelsonjose25](https://forum.networklessons.com/u/nelsonjose25)
#### Post date: [March 16, 2015, 9:24pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/19 "2015-03-16T21:24:26Z")

</div>

i have configure the Tacacs sucessfully and is working but there are a few things i need to know:

First, my cisco device is using the local user on the cisco device for authentication and i dont know why,

second how can I check the authentication logs and the configuration logs?

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [March 17, 2015, 8:08pm UTC](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010/20 "2015-03-17T20:08:44Z")

</div>

Hi Russet,

The default log files on Centos are probably in the /var/log folder.

Is your router able to reach the Tacacs server? Try a debug AAA authentication on the router. It should give you some useful information why it doesn’t use the server for authentication.

Rene

[Next page](https://forum.networklessons.com/t/how-to-install-tacacs-on-linux-centos/1010.md?page=2)
