Authentication, Authorization and Accounting (AAA) for ERS and ES
Technical Configuration Guide
46
November 2010
avaya.com
cmd = exit { permit .* }
cmd = logout { permit .* }
service = exec {
priv-lvl = 1
}
}
group = level6 {
cmd = enable { permit .* }
cmd = configure { permit terminal }
cmd = show { permit .* }
cmd = vlan { permit .* }
cmd = interface { permit .* }
cmd = router { permit .* }
cmd = network { permit .* }
cmd = logout { permit .* }
service = exec {
priv-lvl = 6
}
}
You don’t need to configure network devices as for RADIUS (client.conf).
3.4.2 /etc/init.d/tac_plus
This file is the startup file for TACACS process. Please check that you have a link to
/etc/rcX.d/S99tac_plus
(X can be 2, 3 or 5 depending on your run level). Also check that tac_plus
is started with
–d flag, you will write details about every request into
/var/log/tac_plus.log
file.
The values represent bits, so they can be added together. Currently the following values are recognized:
Value Meaning
8 authorization debugging
16 authentication debugging
32 password file processing debugging
64 accounting debugging
128 config file parsing & lookup
256 packet transmission/reception
512 encryption/decryption
1024 MD5 hash algorithm debugging
2048 very low level encryption/decryption
Debug = 120
logs authorization, authentication, password and accounting
When you modify the configuration file, you have to restart tac_plus process using the following
command:
[root@linux2 raddb]#
/etc/rc5.d/S99tac_plus restart
