Name: TACACS+ authentication (mandatory mode)
Default: no
Priority: 576

Auth-Type: Primary
Auth:
    [default=ignore success=end auth_err=die perm_denied=die user_unknown=die] pam_tacplus.so include=/etc/tacplus_servers login=login

Account-Type: Primary
Account:
    [default=ignore success=1] pam_succeed_if.so user notingroup tacacs quiet
    [default=bad success=end] pam_tacplus.so include=/etc/tacplus_servers login=login

Session-Type: Additional
Session:
    [default=ignore success=1] pam_succeed_if.so user notingroup tacacs quiet
    [default=bad success=ok] pam_tacplus.so include=/etc/tacplus_servers login=login