libnss-tacplus.git - NSS plugin to lookup tacacs client username, and match mapped user after login (mirror of https://github.com/vyos/libnss-tacplus.git)

Age	Commit message (Collapse)	Author
2024-04-29	Import version 1.0.4-cl5.1.0u11 from Cumulus Linux	Christian Breunig

2017-06-30	Fixed remove to clean up plugin entries in nsswitch.conf	Dave Olson
	We weren't removing the tacplus plugin from nsswitch.conf on package remove, now we do. Also cleaned up a bit and use \s instead of [ \t] for whitespace. For postinst, moved into configure case where it belonged. Updated changelog for recent fixes and bumped version
2016-06-28	Provide getpwnam_r entry point to lookup mapped TACACS+ users	Dave Olson
	Initial version with NSS lookups for tacacs users using mapping Works with modified libpam-tacplus to authenticate TACACS+ users without local passwd entries, mapping them to tacacs0..15 based on TACACS privilege level. When the /etc/tacplus_servers tacacs config file is mode 600 (normally the case since it has the server "secret" key), lookups will only work for tacacs users that are logged in, via the local mapping. For root, getpwnam lookups will work for any TACACS user known to the servers. Most syslog's enabled only if debug is set in the config file.