Cacti

msw1970 · Post by **msw1970** » Wed May 28, 2008 5:07 pm

Has anyone considered extending the current authentication methods to include TACACS+ Authentication for users. Currently we heavily use TACACS+ to control access onto our switches... It would be great to be able to extend the group structure we have within our TACACS+ server to control who can do what and which graphs they have the rights to see.

Post by **rony** » Thu May 29, 2008 8:53 am

If you use the Web Basic authentication in Cacti and then setup Apache to use Radius authentication for your Cacti directory, you should get the desired effect.

Post by **TheWitness** » Thu May 29, 2008 8:32 pm

In the latest PIA, you can define your own authentication methods. I can send you reference code. That way you can write a tacacs_auth plugin that provides your authentication services.

TheWitness

zuessi · Post by **zuessi** » Wed Jun 04, 2008 3:09 am

I would be very interested of such an integration!

Thanks for your great work
Zuessi

jfarese · Post by **jfarese** » Fri Jun 06, 2008 1:32 pm

are you using ACS as the backend server.. if so use authxradius in apache with web basic auth and have it authenticate against the radius side of the ACS server.. This is how we do it and it works great.

Post by **TheWitness** » Sat Jun 07, 2008 1:03 pm

I think the apache mod should be enough. So you concur, or would you still ike the guidance?

Regards,

TheWitness

msw1970 · Post by **msw1970** » Sat Jun 07, 2008 1:06 pm

TheWitness wrote:I think the apache mod should be enough. So you concur, or would you still ike the guidance?

Regards,

TheWitness

I'm going to give the apache mod a try and see if that works. I'm currently in the process of building a new server for Cacti as the one I've got it on is starting to chugg... It's only got 512Mb ram and I've now got approx 700 devices and 4,500 data sources on it, so I'll try it on that when I've got it working....

Takes a while to get a server setup though once you've jumped through all the hoops our security department insist on!!!

Post by **TheWitness** » Sat Jun 07, 2008 1:37 pm

You need more RAM. Do a "du -sk /var/www/htm/cacti/rra". You need at least 500mb more than it reports to realy get Cacti to scream.

TheWitness

msw1970 · Post by **msw1970** » Sat Jun 07, 2008 1:41 pm

TheWitness wrote:You need more RAM. Do a "du -sk /var/www/htm/cacti/rra". You need at least 500mb more than it reports to realy get Cacti to scream.

TheWitness

New server's gonna be a virtual server with 2 CPU's and 2Gb ram so should be enough!!

sansk115 · Post by **sansk115** » Fri Oct 17, 2008 5:47 pm

All experts in RADIUS mode, I really novice for cacti but really want to authen cacti with external RADIUS server. Could some of experts provide me the guidline for implement it.

THanks in advance

claymen · Post by **claymen** » Mon Oct 27, 2008 1:22 am

TheWitness wrote:In the latest PIA, you can define your own authentication methods. I can send you reference code. That way you can write a tacacs_auth plugin that provides your authentication services.

TheWitness

Hey mate, can you send some of that info and reference code my way. I may need to look at building a custom auth module to accomplish the auth setup I want. Any help would be greatly appreciated.

Post by **TheWitness** » Wed Oct 29, 2008 7:03 pm

Sent you a PM.

TheWitness

ponwude · Post by **ponwude** » Sat Oct 03, 2009 2:27 am

Hi All,

I am new to this forum.... I have being trying for a while now to use Cisco ACS for Authentication in cacti. i have compiled and installed mod_auth_xradius for apache and it prompts me for a username and password but it never authenticates.

Any help would be greatly appreciated.

Paul

Post by **TheWitness** » Wed Oct 07, 2009 7:49 am

You may have to turn up logging with the module to get at the root of this problem. The issue is not with Cacti, but with the Radius module. Could be SSH related, or certificate related. Definately configuration. Good luck with it. Once you have the password validation working, the Cacti will simply go along for the ride.

TheWitness

Seiya · Post by **Seiya** » Thu Oct 22, 2009 8:40 am

Hello,

I have set up the mod_auth_radius (freeradius) on apache, modified the httpd.conf and all accordingly and it works fine

Cacti - TACACS+ Authentication

Cacti - TACACS+ Authentication

I need the code for RADIUS Plugin

Cacti Radius Authentication

Who is online