From 0d632760079f1b7ad9e18079f9c0c4aed06466c7 Mon Sep 17 00:00:00 2001
From: Robert Bays <rbays@cartagena.vyatta.com>
Date: Wed, 12 Nov 2008 17:43:53 -0800
Subject: add basic tacacs+ support

---
 templates/system/login/tacacs-plus/acct-all/node.def   | 1 +
 templates/system/login/tacacs-plus/debug/node.def      | 1 +
 templates/system/login/tacacs-plus/first-hit/node.def  | 1 +
 templates/system/login/tacacs-plus/no-encrypt/node.def | 1 +
 templates/system/login/tacacs-plus/node.def            | 3 +++
 templates/system/login/tacacs-plus/protocol/node.def   | 2 ++
 templates/system/login/tacacs-plus/secret/node.def     | 2 ++
 templates/system/login/tacacs-plus/server/node.def     | 3 +++
 templates/system/login/tacacs-plus/service/node.def    | 2 ++
 9 files changed, 16 insertions(+)
 create mode 100644 templates/system/login/tacacs-plus/acct-all/node.def
 create mode 100644 templates/system/login/tacacs-plus/debug/node.def
 create mode 100644 templates/system/login/tacacs-plus/first-hit/node.def
 create mode 100644 templates/system/login/tacacs-plus/no-encrypt/node.def
 create mode 100644 templates/system/login/tacacs-plus/node.def
 create mode 100644 templates/system/login/tacacs-plus/protocol/node.def
 create mode 100644 templates/system/login/tacacs-plus/secret/node.def
 create mode 100644 templates/system/login/tacacs-plus/server/node.def
 create mode 100644 templates/system/login/tacacs-plus/service/node.def

(limited to 'templates')

diff --git a/templates/system/login/tacacs-plus/acct-all/node.def b/templates/system/login/tacacs-plus/acct-all/node.def
new file mode 100644
index 00000000..22522f17
--- /dev/null
+++ b/templates/system/login/tacacs-plus/acct-all/node.def
@@ -0,0 +1 @@
+help: Send TACACS+ accounting requests to all servers
diff --git a/templates/system/login/tacacs-plus/debug/node.def b/templates/system/login/tacacs-plus/debug/node.def
new file mode 100644
index 00000000..10aa10b1
--- /dev/null
+++ b/templates/system/login/tacacs-plus/debug/node.def
@@ -0,0 +1 @@
+help: Enable TACACS+ debugging 
diff --git a/templates/system/login/tacacs-plus/first-hit/node.def b/templates/system/login/tacacs-plus/first-hit/node.def
new file mode 100644
index 00000000..18f2fdf6
--- /dev/null
+++ b/templates/system/login/tacacs-plus/first-hit/node.def
@@ -0,0 +1 @@
+help: Set TACACS+ to try multiple servers if a negative auth is returned
diff --git a/templates/system/login/tacacs-plus/no-encrypt/node.def b/templates/system/login/tacacs-plus/no-encrypt/node.def
new file mode 100644
index 00000000..7aa90dfb
--- /dev/null
+++ b/templates/system/login/tacacs-plus/no-encrypt/node.def
@@ -0,0 +1 @@
+help: Set TACACS+ to not encrypt communications
diff --git a/templates/system/login/tacacs-plus/node.def b/templates/system/login/tacacs-plus/node.def
new file mode 100644
index 00000000..d8eab559
--- /dev/null
+++ b/templates/system/login/tacacs-plus/node.def
@@ -0,0 +1,3 @@
+help: Set TACACS+ server authentication
+commit:expression: $VAR(server) != "" && $VAR(secret) != ""
+                     ; "One server and a secret must be specified for TACACS+"
diff --git a/templates/system/login/tacacs-plus/protocol/node.def b/templates/system/login/tacacs-plus/protocol/node.def
new file mode 100644
index 00000000..6a5c739d
--- /dev/null
+++ b/templates/system/login/tacacs-plus/protocol/node.def
@@ -0,0 +1,2 @@
+type: txt
+help: Set TACACS+ protocol for authentication and accounting
diff --git a/templates/system/login/tacacs-plus/secret/node.def b/templates/system/login/tacacs-plus/secret/node.def
new file mode 100644
index 00000000..0f673ae2
--- /dev/null
+++ b/templates/system/login/tacacs-plus/secret/node.def
@@ -0,0 +1,2 @@
+type: txt
+help: Set TACACS+ secret
diff --git a/templates/system/login/tacacs-plus/server/node.def b/templates/system/login/tacacs-plus/server/node.def
new file mode 100644
index 00000000..dc1b1e94
--- /dev/null
+++ b/templates/system/login/tacacs-plus/server/node.def
@@ -0,0 +1,3 @@
+multi:
+type: ipv4
+help: Set TACACS+ server IP addresses
diff --git a/templates/system/login/tacacs-plus/service/node.def b/templates/system/login/tacacs-plus/service/node.def
new file mode 100644
index 00000000..10d1729b
--- /dev/null
+++ b/templates/system/login/tacacs-plus/service/node.def
@@ -0,0 +1,2 @@
+type: txt
+help: Set TACACS+ service for authentication and accounting
-- 
cgit v1.2.3