put AAA features and TACACS in NPM Accounts.

Question

You planed to using this features, and login with TACACS PLUS, to authenticate the ORION Account?

pserwe · Answer

Glad I could help in that way ;)

Come to think of it, it'd be an elegant solution to either make NCM share NPM's auth if you have both and make it capable of using LDAP directly if it's standalone.  If sharing is so difficult, going directly to LDAP (provided NPM can) would be a big step towards integration..

One password to rule them all, one password to bind them, so to speak.

Peter

bshopp · Answer

You hit the root of my original question on the head pserwe

pserwe · Answer

RADIUS, TACACS+, LDAP, and Active Directory are all good suggestions for authentication options in Orion.

I'm looking for LDAP specifically as my most favorite authentication option because:

1)  AD supports LDAP by starting one more service on your DC/BDC.

2)  TACACS+ can use LDAP as the back end.  At least, shrubbery.net's implementation can be compiled with LDAP support.

3)  RADIUS can also use LDAP as the back end.

So, support LDAP, and in one fell swoop, you support all 4 of those options.

Peter