tac+ia

Помогите, народ! Настраиваю такакс для PPP юзеров (блин, да сначала хотя бы
заставить его телнетом на циску пускать, а PPP я потом займусь).
Кто-нибудь знает в чем дело? Вроде все прописано, а
такакс говорит "can't get key value". До этого он работал через раз,
а сейчас вообще перестал. Я уж стал лог упрощать по-максимуму, проверяю
пустит ли он телнетом юзера с cleartext паролем - ему по фигу.
Не знаю, может криво откомпилился?

Лог такакса:
--- start tac_plus.log ---
Thu Oct 12 16:07:17 2000 [14048]: set_usradm_status: can't get key value for mmm
Thu Oct 12 16:07:17 2000 [14048]: login query for 'mmm' tty130 from 195.9.189.1 rejected
--- start tac_plus.log ---

--- start cisco.log ---
2w0d: TAC+: send AUTHEN/START packet ver=192 id=473214472
2w0d: TAC+: Using default tacacs server list.
2w0d: TAC+: Opening TCP/IP to X.X.X.X/49 timeout=5
2w0d: TAC+: Opened TCP/IP handle 0x60A34104 to X.X.X.X/49 using source X.X.X.X
2w0d: TAC+: X.X.X.X (473214472) AUTHEN/START/LOGIN/ASCII queued
2w0d: TAC+: (473214472) AUTHEN/START/LOGIN/ASCII processed
2w0d: TAC+: ver=192 id=473214472 received AUTHEN status = GETUSER
2w0d: TAC+: send AUTHEN/CONT packet id=473214472
2w0d: TAC+: X.X.X.X (473214472) AUTHEN/CONT queued
2w0d: TAC+: (473214472) AUTHEN/CONT processed
2w0d: TAC+: ver=192 id=473214472 received AUTHEN status = GETPASS
2w0d: TAC+: send AUTHEN/CONT packet id=473214472
2w0d: TAC+: X.X.X.X (473214472) AUTHEN/CONT queued
2w0d: TAC+: (473214472) AUTHEN/CONT processed
2w0d: TAC+: ver=192 id=473214472 received AUTHEN status = FAIL
2w0d: TAC+: Closing TCP/IP 0x60A34104 connection to X.X.X.X/49
2w0d: TAC+: send AUTHEN/START packet ver=192 id=384793197
2w0d: TAC+: Using default tacacs server list.
2w0d: TAC+: Opening TCP/IP to X.X.X.X/49 timeout=5
2w0d: TAC+: Opened TCP/IP handle 0x60A3440C to X.X.X.X/49 using source X.X.X.X
2w0d: TAC+: X.X.X.X (384793197) AUTHEN/START/LOGIN/ASCII queued
2w0d: TAC+: (384793197) AUTHEN/START/LOGIN/ASCII processed
2w0d: TAC+: ver=192 id=384793197 received AUTHEN status = GETUSER
--- end cisco.log ---


Конфиг такакса (про PPP пока речи не идет, пускал бы телнетом)
--- start tac_plus.conf ---
key="XXXK26443KII786"

accounting file = /usr/local/tacacs/tac_plus/acctfile

user=mmm {
login=cleartext "111"
}
--- end tac_plus.conf ---


Кусок конфига циски:
--- start cisco.conf ---
!
version 11.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname gw
!
aaa new-model
aaa authentication login default tacacs+ local
aaa authentication ppp default if-needed local
enable secret 5 XXXXXXXXXXXXXXXXXXXXXXXXX
enable password 7 XXXXXXXXXXXXXXXXXXXX
!
ip subnet-zero
ip rcmd rcp-enable
ip rcmd rsh-enable
ip rcmd remote-host root X.X.X.X root enable
ip rcmd source-interface Ethernet0/0
ip tacacs source-interface Ethernet0/0
ip name-server X.X.X.X
async-bootp subnet-mask 255.255.255.128
async-bootp gateway X.X.X.X
async-bootp dns-server X.X.X.X
clock timezone MSK 3
clock summer-time MSD recurring last Sun Mar 2:00 last Sun Oct 2:00
!
interface Ethernet0/0
description connected to Network
ip address X.X.X.X X.X.X.X
no ip directed-broadcast
ntp broadcast client
!
tacacs-server host X.X.X.X
tacacs-server attempts 2
tacacs-server key XXXK26443KII786
snmp-server community public RO
snmp-server trap-authentication
snmp-server enable traps isdn call-information
snmp-server enable traps config
snmp-server enable traps envmon
snmp-server enable traps syslog
snmp-server enable traps bgp
snmp-server enable traps frame-relay
snmp-server enable traps rtr
privilege exec level 15 telnet
privilege exec level 15 show
--- end cisco.conf ---