The freeRADIUS 4.0 (alpha) release notes, this is taken from the official announcement.

This version of a freeRADIUS would not be as interesting if it did not ship new protocol support. Since the release of the official TACACS+ RFC, now over 5 years agofew years ago, software projects have now the fundamental information they needed to be able to implement TACACS+ protocol support for their software.

Now the alpha freeRADIUS announcement is not 2 years old. But for myself it is new information. This is a reminder build a simple netlab with the freeRADIUS 4.0 version and setup a virtual TACACS+ daemon.

Well not to the news there on the website:

The Good News

  • RADIUS Of course.
  • DHCPv4 This is now fully supported as a native protocol, and is not "faked out" by pretending it is RADIUS.
  • DHCPv6 All DHCPv6 options are supported. The DHPv6 group nesting was a major contributor to the delay in v4.
  • TACACS+ Full support for TACACS+.
  • cron Simplistic cron jobs can be schedule to perform time-based actions.

The Bad News

This is an "alpha" release. It may crash, and certain feature sets are limited, as noted below.

  • RADIUS RADIUS/TLS (RadSec) is not supported. PEAP, TTLS, EAP-FAST, and TEAP are not supported.
  • DHCPv4 Relaying has limited support.
  • DHCPv6 Relaying has limited support.
  • TACACS+ There are a large number of "odd" TACACS+ implementations. We have not tested interoperability with them all.
  • cron There is limited support for adding and deleting cron timers "on the fly".

A new, independent and free and open TACACS+ implementation available. Here the download links:

I will build it from the source rather than installing a binary. Before a netlab check the TACACS+ bugs situation:

A interesting bug report where the default example configuration is found, which is one-to-one example from the docs. Good starting point.

References