UC500.com

SSH/CCA Access using TACACS?

We're trying to configure AAA to the UC500 for ssh and CCA access, but when we configure AAA for TACACS, the CCA topology and backups seem seem to break. Has anyone successfully configured the UC500 for TACACS? These are the commands we used in the CLI:

aaa new-model
aaa authentication password-prompt "ENTER PASSCODE:"
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting connection h323 start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
aaa accounting resource default start-stop group tacacs+
aaa authentication login sdm_vpn_xauth_ml_1 tacacs+
aaa authorization network sdm_vpn_group_ml_1 tacacs+

VPN to UC500 using TACACS?
We're setting up VPN for software clients to the UC500, but all the docs reference only local users. Has anyone configured the UC500 to use TACACS or RADIUS accounts for VPN authentication? what commands did you use?

Call Detail Records (CDRs) to CiscoSecure ACS using TACACS?
Because the UC500 keeps only a few CDRs, we want the CDRs to go to our CiscoSecure ACS server. Is this the correct AAA command to make this work? we applied it, but we aren't getting anything in our ACS logs.
aaa accounting connection h323 start-stop group tacacs+