Sunday, October 7, 2018

TACACS+ on Linux -- Server config

Users ,groups, enable = $enab15$


nano /etc/tacacs+/tac_plus.conf


# Created by Henry-Nicolas Tourneur(henry.nicolas@tourneur.be)
# See man(5) tac_plus.conf for more details
#


# Define where to log accounting data, this is the default.
accounting file = /var/log/tac_plus.acct

# This is the key that clients use to access Tacacs+ server


key = "Cisco321"

#You can also use Linux authentication 

# /etc/passwd file -- all users added to Linux will be also in TACACS+
#default authentication = file /etc/passwd


# Much more features are availables, like ACL, more service compatibilities,
# commands authorization, scripting authorization.
# See the man page for those features.





#Default Group

group = adminiis {
default service = permit #if deny here-no enable, no priv
service = exec {
priv-lvl = 15
    }
}
 

# to generate MD5 salted password use tac_pwd

# Usage: tac_pwd [-ehm] []
#        -e      do not echo the password
#        -h      display this message
#        -m      generate MD5 crypt
#Default User

 user = administrator {
member = adminiis
login = des $1$Os$YCyHqKOMpDWOW3VArn/wR.
}

#Enable Passworde to gain Privilege 15 !!

##!@ DO NOT CHANGE USER BELOW! @!##

user = $enab15$ {
    login = des $1$sZ$/XuPZ.ZEjTenroBEWJEy6.

}

No comments:

Post a Comment

Thank you for your comment. Will try to react as soon as possible.

Regards,

Networ King