Rhel 7 accounting errors about tac_plus

[cooperlees]

Hi,

What version are you running on your rhel 6 box? Is that error from tacacs log or your network devices?

I'd personally tcpdump full packets and compare the two exchanges and see whats different on the wire - https://github.com/isginf/pcap-diff or there are a few others (I've never used this one).

I believe our accounting all works with this version and over IPv6.

[tgreaser]

We run Rhel 7.5 ..
I will push this code to fedora 28 , and RHEL 6.10 and test.
And thanks for the pcap-diff will be interesting to check out..

[tgreaser]

PS running old version on rhel 6
tac_plus version 4.4rc2-3 (Extended Tac_plus)

[tgreaser]

Having same issues with Fedora 27 and Fedora 28**
ACCT, flags=0x6a method=192 priv_lvl=160
type=126 svc=79
AUTHOR data length (416) exceeds packet length 118
10.10.10.15: acct minimum payload: 263, got: 127

Need a little help on telling fedora 28 to tell it to compile without wrappers as its depreciated

Ive tried a super basic .cfg .. same results. I see the accounting packets with the data payload in pcap but the process throws the data lenght every time.. I will try a deb box tomorrow..

[tgreaser]

cooperlees
Thanks for taking the time to look @ my post.. Please note this was my issue as I screwed up the secrete on the account statement on my Juniper gear, but had the tacplus-server secret right.
Once i seen a Cisco accounting log come through I know tac was 100%..
I went back and re did all my tac and accounting on juniper gear that I had pointed to the new tacac plus server..

I feel lame but hope this post makes someone revisit their account config and their tacplus-server config .

Juniper posts that if you don't have a account server set it will use what you used in tacplus-server..

[cooperlees]

Awesome. Glad you worked it out and took some time to debug it! Good luck.