
		tacp2radd  v0.1
		===============

0. WHAT DOES THIS SOFTWARE DO?

This program runs as a daemon, translating tacacs+ requests to RADIUS.
It sits in between a tacacs+ client (a Cisco access server) and a
RADIUS daemon.

We wrote this because we use a Cisco 4000 for ISDN access. Unfortunately
the Cisco 4000M doesn't speak RADIUS, only tacacs+.

The software was written on a Debian/Linux system, Linux 2.0.25,
libc5.2.18, gcc-2.7.2, binutils-2.7. I have no intent of porting it
to another OS (though that shouldn't be hard).

At the moment, only PPP connections are really supported. Telnet/rlogin
authentication/authorization is not 100% finished yet. These functions
are more likely to be needed on a Cisco 2511 or so which has RADIUS
builtin anyway.

1. INSTALLATION.

Just type "make" to compile the stuff.

Then install the program and config files:

tacp2radd      ->     /usr/local/sbin
tacp2rad.conf  ->     /etc
tacp2rad.map   ->     /etc

If you have a Debian Linux system:

rc.tacp2radd   ->     /etc/init.d/tacp2radd
  and run "update-rc.d tacp2radd defaults"

Otherwise, study the rc.tacp2radd file and add somthing similar to your
startup files, eg rc.local to start the daemon at boot.

2. CONFIGURATION OF TACP2RADD

Edit the tacp2rad.* files in /etc. The comments at the top of the files
explain what they do.

If you need to know more, "use the Source, Luke".

3. TACACS+ CONFIGURATION OF A CISCO.

We have something like this:

aaa new-model
aaa authentication login default local
aaa authentication ppp default tacacs+ local
aaa authorization exec local tacacs+
aaa authorization network tacacs+ if-authenticated
aaa accounting network start-stop tacacs+
aaa accounting connection start-stop tacacs+
tacacs-server host 192.168.77.9
no tacacs-server key

No that you can't specify a "tacacs-key" yet - this isn't implemented
at the moment.

4. SUPPORT AND WARRANTY.

NONE. That's right. You are on your own with this. I can't guarantee
that this works for everyone, or anyone at that matter. I don't have
time to support this software. I have been known to respond to email every
now and then in the past, though.

5. LICENSE.

tacp2radd is Copyright (C) 1996 Cistron Internet Services B.V.

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; version 2 dated June, 1991.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.

   You should have received a copy of the GNU General Public License
   along with this program;  if not, write to the Free Software
   Foundation, Inc., 675 Mass Ave., Cambridge, MA 02139, USA.

On Debian GNU/Linux systems, the complete text of the GNU General
Public License can be found in `/usr/doc/copyright/GPL'.

6. AUTHOR.

Miquel van Smoorenburg <miquels@cistron.nl>

