summaryrefslogtreecommitdiff
path: root/src/pam-configs/tacplus
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2023-06-21 22:11:44 +0200
committerChristian Breunig <christian@breunig.cc>2023-06-22 22:37:41 +0200
commit3ec727670de02cac06321719a0323650046d54a1 (patch)
treec1a2932dbec7dc3e498ad5bd9db2831249c4b1fa /src/pam-configs/tacplus
parent69ce448cbb02be5c29f6420dc91618639ec30301 (diff)
downloadvyos-1x-3ec727670de02cac06321719a0323650046d54a1.tar.gz
vyos-1x-3ec727670de02cac06321719a0323650046d54a1.zip
tacacs: T141: initial implementation
Diffstat (limited to 'src/pam-configs/tacplus')
-rw-r--r--src/pam-configs/tacplus17
1 files changed, 17 insertions, 0 deletions
diff --git a/src/pam-configs/tacplus b/src/pam-configs/tacplus
new file mode 100644
index 000000000..66a1eaa4c
--- /dev/null
+++ b/src/pam-configs/tacplus
@@ -0,0 +1,17 @@
+Name: TACACS+ authentication
+Default: no
+Priority: 257
+Auth-Type: Primary
+Auth:
+ [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet
+ [authinfo_unavail=ignore success=end auth_err=bad default=ignore] pam_tacplus.so include=/etc/tacplus_servers login=login
+
+Account-Type: Primary
+Account:
+ [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet
+ [authinfo_unavail=ignore success=end perm_denied=bad default=ignore] pam_tacplus.so include=/etc/tacplus_servers login=login
+
+Session-Type: Additional
+Session:
+ [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet
+ [authinfo_unavail=ignore success=ok default=ignore] pam_tacplus.so include=/etc/tacplus_servers login=login