TACACS+, dial-in, LDAP, among others

Last Friday, the Boss asked me to disable TACACS+ on Maui so
authentication will just be on the 2500. I was a bit nervous because I
wasn't really that comfortable with IOS just yet, and I'd hate to mess
around with the router configs with only a very basic understanding of
how it works. But there's always a first time for everything, so off I went.

I just appended "no" to all lines that I wanted to
disable in the config, crossed my fingers, did a Ctrl-Z and
"write". Phew! Easy does it.

I've also managed to get the Perl CGI script for proxy user
management on Jabber to work. Thank goodness for open source, I was
actually able to tweak the code and study it a bit further.

Here's my plan: I'm going to study Perl, and what better way to
start off than having a project. And I do have one: that of Orso's
admuser.cgi. Nothing much to change there, but my plan is
to make it work across multiple servers, and include a few nifty
features like last user login, group management, etc. Pretty tall order,
but I'll get there. After that, I can add Perl to my list of skills. Cool.

Still having problems with LDAP. I haven't ferreted out the
authentication issue with AD. Okay, so I can do anonymous
ldapsearch on the AD, but authenticated queries are no
dice. Once I get that down pat, I will be able to transfer proxy
authentication to LDAP, and later on, email accounts will be
authenticated that way. Single sign-on, here I come.

--
Ian Dexter R. Marquez
Information and Communication Technology Division
Philippine Rice Research Institute
Central Experiment Station, Maligaya 3119
Science City of Munoz PHILIPPINES
Trunk: +63 (44) 456 0258, 0277, 0285, 0426, 0653
Voice: ext.232 | Fax: ext.233

In my end is my beginning.
-- Mary Stuart, Queen of Scots