Skip to content
This repository has been archived by the owner on Feb 28, 2024. It is now read-only.

Mechanism to get the user priviledge from TACACS Server #193

Open
subritm opened this issue Feb 9, 2023 · 0 comments
Open

Mechanism to get the user priviledge from TACACS Server #193

subritm opened this issue Feb 9, 2023 · 0 comments

Comments

@subritm
Copy link

subritm commented Feb 9, 2023

I have setup a TACACS+ server with Ubuntu 18 version.
Created users

user = DEFAULT {
        login = PAM
        service = ppp protocol = ip {}
}

user=Admin {
 global = cleartext "administrator"
 member="admin"
}
user=Standard {
login = cleartext "standard"
member=readonly
}
group = admin {
 default service = deny
service = administrator {
default attribute = permit
priv-lvl = 15
}
 login = file /etc/passwd
}
group = readonly {
default service = deny
service = useraccess {
default attribute = permit
priv-lvl = 1
}
}

In client side I tried this

tacc -T -u Admin -p administrator -s 10.1.1.1 -k Secret@12345 -L login -r 10.1.1.1 -S ppp -P ip -y tty0

Its authenticates and with invalid password correctly reports the same.

My doubt is regarding how do we get the privilege level information.
like User Admin is having admin privilege while Standard user will have readonly level 1 privilege.
can we get this info in response from the server ?

Thanks in Advance

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant