From 678de9b4ac465247ac41d7018dea883d11e97e58 Mon Sep 17 00:00:00 2001 From: Dave Olson Date: Thu, 23 Jun 2016 13:39:25 -0700 Subject: Provide getpwnam_r entry point to lookup mapped TACACS+ users Initial version with NSS lookups for tacacs users using mapping Works with modified libpam-tacplus to authenticate TACACS+ users without local passwd entries, mapping them to tacacs0..15 based on TACACS privilege level. When the /etc/tacplus_servers tacacs config file is mode 600 (normally the case since it has the server "secret" key), lookups will only work for tacacs users that are logged in, via the local mapping. For root, getpwnam lookups will work for any TACACS user known to the servers. Most syslog's enabled only if debug is set in the config file. --- debian/copyright | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/debian/copyright b/debian/copyright index 6c70b2e..7583e7a 100644 --- a/debian/copyright +++ b/debian/copyright @@ -3,7 +3,8 @@ Upstream-Name: libnss-tacplus Homepage: http://cumulusnetworks.com Files: * -Copyright: 2015, 2016 Cumulus Networks, Inc +Copyright: 2010 Pawel Krawczyk and Jeroen Nijhof , + 2015, 2016 Cumulus Networks, Inc. License: GPL-2+ This package is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by -- cgit v1.2.3