Here is my typicall 2930 tacacs template
tacacs-server host 172.16.10.3 key "RADIUSKEY"
tacacs-server timeout 5
aaa authentication login privilege-mode
###SSH###
aaa authentication ssh login tacacs local
aaa authentication ssh enable tacacs local
###TELNET###
aaa authentication telnet login tacacs local
aaa authentication telnet enable tacacs local
###CONSOLE###
aaa authentication console login tacacs local
aaa authentication console enable tacacs local
aaa authorization commands auto
no web-management management-url
no telnet-server