summaryrefslogtreecommitdiff
path: root/tacplus.sudo
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-05-02 19:07:13 +0200
committerChristian Poessinger <christian@poessinger.com>2021-05-02 19:07:49 +0200
commit7d2e07fd4502aed3b841484855031ca8a48aebba (patch)
tree7861b20208fd1089b0d6e67f72523d0ca6d745da /tacplus.sudo
downloadlibtacplus-map-7d2e07fd4502aed3b841484855031ca8a48aebba.tar.gz
libtacplus-map-7d2e07fd4502aed3b841484855031ca8a48aebba.zip
Initial import of libtacplus-map (1.0.1-cl3u3)
Diffstat (limited to 'tacplus.sudo')
-rw-r--r--tacplus.sudo18
1 files changed, 18 insertions, 0 deletions
diff --git a/tacplus.sudo b/tacplus.sudo
new file mode 100644
index 0000000..bc90883
--- /dev/null
+++ b/tacplus.sudo
@@ -0,0 +1,18 @@
+# This file is part of the libtacplus-map package.
+# It allow tacacs privilege level 15 users (mapped to local user tacacs15)
+# to sudo without restrictions, so they can do all switch setup and
+# administration. The tacacs15 user is added by the same package, and
+# is configured to be a disabled login
+tacacs15 ALL=(ALL:ALL) ALL
+
+# If you want to allow privileged tacacs users (level 15) to execute
+# sudo without a password, comment out the tacacs 15 line above, and
+# uncomment out the line below:
+# tacacs15 ALL=(ALL:ALL) NOPASSWD:NOEXEC: ALL
+
+# Allow any tacacs group login to run this set of commands. this is just a
+# demonstration.
+# This example uses group tacacs, if you want all tacacs group users
+# to be able to run some commands thorugh sudo.
+# %tacacs ALL = (root) NOPASSWD:NOEXEC: /usr/bin/whoami
+