Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to set UCS Locales using Radius/Tacacs+ Attributes

I know how to set a remotely authenticated/authorized users Role using the Radius av-pairs with UCS.

What Radius attribute/av-pair syntax is needed to set the users Locale within UCS?

I have tried shell:roles="role@locales" and shell:locales="locale name" with no success.

5 REPLIES
New Member

Re: How to set UCS Locales using Radius/Tacacs+ Attributes

It's not straight forward.  See the attached PDF how I made it work.

Cisco Employee

Re: How to set UCS Locales using Radius/Tacacs+ Attributes

Something else to note:

Configuring locales to the user roles are not valid as these are global-system users:

-          aaa

-          admin

-          operations

Locales can be configured only with following user roles:

-          Network

-          Server-equipment

-          Server-profile

-          Server-security

-          Storage

New Member

How to set UCS Locales using Radius/Tacacs+ Attributes

Is there an example of using locales with IAS or Radius, roles are working but the locales seem to be ignored. Should the locales be a seperate attribute or combined with the role?

Cisco Employee

Re: How to set UCS Locales using Radius/Tacacs+ Attributes

Hi Peter,

I have tested this using Tacacs and it had worked well:

         shell:roles*" " shell:locales*" "

          (single attribute, separator between role and locale is SPACE, separator between multiple roles/locales is also SPACE)

Probably the same syntax will work with Radius as well.

Cheers,

Gabor

New Member

How to set UCS Locales using Radius/Tacacs+ Attributes

Just a FYI to those out there trying to get Locales in UCSM working with with Cisco ACS 5.x.  The attached image is the method to create the proper shell profile attribute values for locales support in UCSM with TACACS+ as the authenication domain.  Vincent above also has it right on the priviledges available with locales support.

I am using the Manditory requirement as this shell profile is only used on Cisco UCS Devices.

I hope this saves someone a lot of frigging around! :-)

Jim

2494
Views
5
Helpful
5
Replies