Usinf Truenas community with cisco ise Radius or tacacs without AD < local ise account>

TrueNAS General
1

I did not see any listing of using truenas with radius or tacacs. Do you all have that option and or documentation?

2

tacacs+ authentication for debian google search.

looks like it can be done but adding packages is not an option. could you all add both radius and tacacs and have them listed as a service?

3

What services on TrueNAS would you want this authentication for?

SMB file sharing will work with a Windows domain controller or a Samba domain controller and nothing else. No LDAP, no RADIUS, … it’s Windows (compatible) DC or no worky.

If it is for UI authentication for administrators … well, at least I can see the use case.

But that’s why I ask you to please provide the full user story.

Thanks,
Patrick

4

Working in IT Forever and a day to access any of my network devices and most all my vendor appliances we use ISE either radius or tacacs to manage the devices, <cli access, and GUI access>. this is an enterprise security tool. If you use it with AD you can monitor, log, and control access via enforcement of RBAC, < role-based access control> /c/en/us/support/docs/security/identity-services-engine/200891-Understanding-Admin-Access-and-RBAC-Poli.html

Here is a YT vid for radius on linux box, tacacs is almost identical, just a different package.
/ watch?v=29xPmbTWKcc

5

first link is cisco url second at the end is youtube url

6

So for administrative access. Understood. Best open a feature request, then.
I just wanted to hint at you that it won’t work for file sharing services.

HTH,
Patrick

1 Like
7

yeah, this is for admin stuff.