libnss-tacplus.git/config, branch masterNSS plugin to lookup tacacs client username, and match mapped user after login (mirror of https://github.com/vyos/libnss-tacplus.git)
https://git.amelek.net/vyos/libnss-tacplus.git/atom?h=master2024-04-29T18:58:47+00:00Import version 1.0.4-cl5.1.0u11 from Cumulus Linux2024-04-29T18:58:47+00:00Christian Breunigchristian@breunig.cc2024-04-29T18:58:47+00:00urn:sha1:049d2843b521d15e2f355430d94eb9d2e83311beProvide getpwnam_r entry point to lookup mapped TACACS+ users2016-06-28T22:45:47+00:00Dave Olsonolson@cumulusnetworks.com2016-06-23T20:39:25+00:00urn:sha1:ab9634da79286d2f04f40011331f2feee208e513
Initial version with NSS lookups for tacacs users using mapping
Works with modified libpam-tacplus to authenticate TACACS+ users
without local passwd entries, mapping them to tacacs0..15 based on
TACACS privilege level.
When the /etc/tacplus_servers tacacs config file is mode 600 (normally
the case since it has the server "secret" key), lookups will only work
for tacacs users that are logged in, via the local mapping. For root,
getpwnam lookups will work for any TACACS user known to the servers.
Most syslog's enabled only if debug is set in the config file.