From 3ec727670de02cac06321719a0323650046d54a1 Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Wed, 21 Jun 2023 22:11:44 +0200
Subject: tacacs: T141: initial implementation

---
 interface-definitions/system-login.xml.in | 59 +++++++++++++++++++++++--------
 1 file changed, 45 insertions(+), 14 deletions(-)

(limited to 'interface-definitions')

diff --git a/interface-definitions/system-login.xml.in b/interface-definitions/system-login.xml.in
index be4f53c3b..d772c7821 100644
--- a/interface-definitions/system-login.xml.in
+++ b/interface-definitions/system-login.xml.in
@@ -193,20 +193,7 @@
             <children>
               <tagNode name="server">
                 <children>
-                  <leafNode name="timeout">
-                    <properties>
-                      <help>Session timeout</help>
-                      <valueHelp>
-                        <format>u32:1-30</format>
-                        <description>Session timeout in seconds</description>
-                      </valueHelp>
-                      <constraint>
-                        <validator name="numeric" argument="--range 1-30"/>
-                      </constraint>
-                      <constraintErrorMessage>Timeout must be between 1 and 30 seconds</constraintErrorMessage>
-                    </properties>
-                    <defaultValue>2</defaultValue>
-                  </leafNode>
+                  #include <include/radius-timeout.xml.i>
                   <leafNode name="priority">
                     <properties>
                       <help>Server priority</help>
@@ -225,6 +212,50 @@
               #include <include/interface/vrf.xml.i>
             </children>
           </node>
+          <node name="tacacs">
+            <properties>
+              <help>TACACS+ based user authentication</help>
+            </properties>
+            <children>
+              <tagNode name="server">
+                <properties>
+                  <help>TACACS+ server configuration</help>
+                  <valueHelp>
+                    <format>ipv4</format>
+                    <description>TACACS+ server IPv4 address</description>
+                  </valueHelp>
+                  <constraint>
+                    <validator name="ipv4-address"/>
+                  </constraint>
+                </properties>
+                <children>
+                  #include <include/generic-disable-node.xml.i>
+                  #include <include/radius-server-key.xml.i>
+                  #include <include/port-number.xml.i>
+                  <leafNode name="port">
+                    <defaultValue>49</defaultValue>
+                  </leafNode>
+                </children>
+              </tagNode>
+              <leafNode name="source-address">
+                <properties>
+                  <help>Source IP used to communicate with TACACS+ server</help>
+                  <completionHelp>
+                    <script>${vyos_completion_dir}/list_local_ips.sh --ipv4</script>
+                  </completionHelp>
+                  <valueHelp>
+                    <format>ipv4</format>
+                    <description>IPv4 source address</description>
+                  </valueHelp>
+                  <constraint>
+                    <validator name="ipv4-address"/>
+                  </constraint>
+                </properties>
+              </leafNode>
+              #include <include/radius-timeout.xml.i>
+              #include <include/interface/vrf.xml.i>
+            </children>
+          </node>
           <leafNode name="max-login-session">
             <properties>
               <help>Maximum number of all login sessions</help>
-- 
cgit v1.2.3