summaryrefslogtreecommitdiff
path: root/src/pam-configs/tacplus-optional
blob: deed537d31f5071916445d6e37a12dbc678cd815 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
Name: TACACS+ authentication (optional mode)
Default: no
Priority: 576

Auth-Type: Primary
Auth-Initial:
    [default=ignore success=end] pam_tacplus.so include=/etc/tacplus_servers login=login
Auth:
    [default=ignore success=end] pam_tacplus.so include=/etc/tacplus_servers login=login use_first_pass

Account-Type: Primary
Account:
    [default=ignore success=1] pam_succeed_if.so user notingroup tacacs quiet
    [default=ignore new_authtok_reqd=done success=end perm_denied=bad auth_err=bad] pam_tacplus.so include=/etc/tacplus_servers login=login

Session-Type: Additional
Session:
    [default=ignore success=1] pam_succeed_if.so user notingroup tacacs quiet
    [default=ignore success=ok perm_denied=bad auth_err=bad] pam_tacplus.so include=/etc/tacplus_servers login=login