<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<a class="moz-txt-link-abbreviated" href="mailto:pam-list-request@redhat.com">pam-list-request@redhat.com</a> wrote:
<blockquote cite="mid20070412203546.59975735C3@hormel.redhat.com"
type="cite"><br>
<table class="header-part1" border="0" cellpadding="0" cellspacing="0"
width="100%">
<tbody>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">Subject:
</div>
Tacacs +PAM</td>
</tr>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">From: </div>
"Roberto Dud" <a class="moz-txt-link-rfc2396E" href="mailto:roberto.dud@gmail.com"><roberto.dud@gmail.com></a></td>
</tr>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">Date: </div>
Thu, 12 Apr 2007 16:56:22 -0300</td>
</tr>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">To: </div>
<a class="moz-txt-link-abbreviated" href="mailto:pam-list@redhat.com">pam-list@redhat.com</a></td>
</tr>
</tbody>
</table>
<table class="header-part2" border="0" cellpadding="0" cellspacing="0"
width="100%">
<tbody>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">To: </div>
<a class="moz-txt-link-abbreviated" href="mailto:pam-list@redhat.com">pam-list@redhat.com</a></td>
</tr>
</tbody>
</table>
<table class="header-part3" border="0" cellpadding="0" cellspacing="0"
width="100%">
<tbody>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">Precedence:
</div>
junk</td>
</tr>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">MIME-Version:
</div>
1.0</td>
</tr>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">Reply-To:
</div>
Pluggable Authentication Modules <a class="moz-txt-link-rfc2396E" href="mailto:pam-list@redhat.com"><pam-list@redhat.com></a></td>
</tr>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">Message-ID:
</div>
<a class="moz-txt-link-rfc2396E" href="mailto:93b73b230704121256h30d2ebd0t2a939e92edae5d3a@mail.gmail.com"><93b73b230704121256h30d2ebd0t2a939e92edae5d3a@mail.gmail.com></a></td>
</tr>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">Content-Type:
</div>
multipart/alternative; boundary="----=_Part_21615_5006272.1176407782942"</td>
</tr>
<tr>
<td>
<div class="headerdisplayname" style="display: inline;">Message:
</div>
7</td>
</tr>
</tbody>
</table>
<br>
Hi Mrs,<br>
<br>
I have a Tacacs server to centralize autentication in my routers,
switchs, cmts ... And I think I will use this infraestructure to
centralize my authentication on my Linux Servers.<br>
<br>
I found on my seachs on google a PAM module to tacacs.
<br>
<br>
Anyone know about or use this module?<br>
<br>
Thanks,<br>
<br>
Dud.<br>
<br>
</blockquote>
<font face="Helvetica, Arial, sans-serif">Dud,<br>
<br>
i suppose you're talking of the tacacs+ client package published by
some Polish guy (don't remember the name<br>
right now). The pam_tacacs module works quite fine. Soem quirks when
using tacacs 'accounting' (not to be confused <br>
with PAM accounting, which is the equivalent to tacacs 'authorize').
There is a drawback in that the module supports only<br>
one tacacs server. The workaround i took, was to stack the module
twice, each one with a different tacacs server.<br>
Don't forget to switch on encryption. My configuration was:<br>
<br>
auth sufficient pam_tacplus.so encrypt secret=FarAway
server=10.13.0.22<br>
</font><font face="Helvetica, Arial, sans-serif"> auth
sufficient pam_tacplus.so encrypt secret=FarAway server=10.14.1.69</font><br>
<font face="Helvetica, Arial, sans-serif"><br>
BTW the above package includes 'tacc', a small line-mode tacacs
client. A fine tool when debugging the tacacs environment. <br>
<br>
Andreas<br>
</font><br>
<pre class="moz-signature" cols="90">--
Dr.-Ing. Andreas Schindler
Alpha Zero One Computersysteme GmbH
Frankfurter Str. 141
63303 Dreieich
Telefon 06103-57187-21
Telefax 06103-373245
<a class="moz-txt-link-abbreviated" href="mailto:schindler@az1.de">schindler@az1.de</a>
<a class="moz-txt-link-abbreviated" href="http://www.az1.de">www.az1.de</a>
</pre>
</body>
</html>