Monday, August 20, 2007

Tacacs+ Web Interface

In the past few years since I began writing perl I have collected a little arsenal of half-baked programs that have never really been exposed to the world, probably because I was too lazy to clean them up. I decided that I would use this week to expose some of the programs that I have written over the years. For the most part I worked on these until they worked rather than until they were done correctly, but they may serve as a starting point for someone else looking to do the same thing.

The first program on the list (download here) is a little web interface to the open source tacacs+ AAA server from shrubbery.net. The Cisco SecureACS server can be fine, but if you need regular expression support in ACLs or a way of automating entries it may not be the tool for you. That said, editing a flat config file can be problematic for some folks. This was my quick solution.

This is just a series of CGI scripts that allows the user to admin the tacacs+ server without learning vi. It includes the ability to add users, delete users, administrative password resets, show configuration, and test authentication. When a users password is near expiration they can log in and change it. Passwords are checked against the aspell dictionary to make sure that they're not a simple word (yeah, there is room for much more improvement here).

There are also a couple little bonus scripts, one useful and one for fun. The tac2rad.pl script is for tying the shrubery tacacs+ user database in with a freeradius server with the MySQL back-end. It copies the users and passwords over to MySQL from tacacs+. The second, crack.pl, was just for my own learning experience. It scours the config file for des encrypted passwords and cracks them if they're simple dictionary words... which I somehow thought would be difficult... it is not.

I don't maintain these or fix them, but if they're useful to you drop me a comment and let me know.

15 comments:

  1. hello,

    I am interested to your program, your link seem down, could you provide me a new one ?

    Thanks.

    ReplyDelete
  2. Fun, links like this must have been broken for a couple years. Works now.

    ReplyDelete
    Replies
    1. It seems the html files are missing ?
      Could you tell me how to use your script ?

      Thanks

      Delete
  3. Sorry, these are unmaintained / unsupported. It may useful for you to start a project, but is not really usable as an off-the-shelf solution.

    ReplyDelete
  4. hi,

    Can you tell me please how to install your web interface for tacacs.

    Thanks.

    ReplyDelete
  5. Great article Lot's of information to Read...Great Man Keep Posting and update to People..Thanks Webdesign

    ReplyDelete
  6. Excellent article. Very interesting to read. I really love to read such a nice article. Thanks! keep rocking. Webdesign

    ReplyDelete
  7. Thanks for taking the time to discuss this, I feel strongly about it and love learning more on this topic. If possible, as you gain expertise, would you mind updating your blog with extra information? It is extremely helpful for me. Webdesign

    ReplyDelete
  8. Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work. Webdesign

    ReplyDelete
  9. Webdesigner waar u een professionele en betaalbare website kan laten maken? De nr. 1 webdesigner in Limburg, Antwerpen en Vlaams-Brabant voor SEO websites. Webdesigner

    ReplyDelete
  10. I organized them with a rundown and after that worked out an arrangement to achieve my objectives thus making me much less disheartened about feeling like I'm sitting idle. Webdesign

    ReplyDelete
  11. Yes i am totally agreed with this article and i just want say that this article is very nice and very informative article.I will make sure to be reading your blog more. You made a good point but I can't help but wonder, what about the other side? !!!!!!Thanks Webdesign bureau

    ReplyDelete
  12. I can set up my new idea from this post. It gives in depth information. Thanks for this valuable information for all,.. freelance web designer london

    ReplyDelete
  13. This is very educational content and written well for a change. It's nice to see that some people still understand how to write a quality post! Digital marketing company

    ReplyDelete