<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/src/pam-configs/tacplus, branch current</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-1x.git/atom?h=current</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-1x.git/atom?h=current'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/'/>
<updated>2023-09-13T18:02:32+00:00</updated>
<entry>
<title>TACACS: T5577: Added `mandatory` and `optional` modes for TACACS+</title>
<updated>2023-09-13T18:02:32+00:00</updated>
<author>
<name>zsdc</name>
<email>taras@vyos.io</email>
</author>
<published>2023-09-13T10:16:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=1c804685d05ad639bcb1a9ebce68a7a14268500f'/>
<id>urn:sha1:1c804685d05ad639bcb1a9ebce68a7a14268500f</id>
<content type='text'>
In CLI we can choose authentication logic:

  - `mandatory` - if TACACS+ answered with `REJECT`, authentication must be
  stopped and access denied immediately.
  - `optional` (default) - if TACACS+ answers with `REJECT`, authentication
  continues using the next module.

In `mandatory` mode authentication will be stopped only if TACACS+ clearly
answered that access should be denied (no user in TACACS+ database, wrong
password, etc.). If TACACS+ is not available or other errors happen, it will be
skipped and authentication will continue with the next module, like in
`optional` mode.
</content>
</entry>
<entry>
<title>tacacs: T141: initial implementation</title>
<updated>2023-06-22T20:37:41+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-06-21T20:11:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=3ec727670de02cac06321719a0323650046d54a1'/>
<id>urn:sha1:3ec727670de02cac06321719a0323650046d54a1</id>
<content type='text'>
</content>
</entry>
</feed>
