User authentication
Terminal Access Controller Access-Control System Plus ()
IX14 User Guide
210
2. At the command line, type
config
to enter configuration mode:
> config
(config)>
3. (Optional) Prevent other authentication methods from being used if authentication
fails. Other authentication methods will only be used if the server is unavailable.
(config)> auth authoritative true
(config)>
4. (Optional) Configure the group_attribute. This is the name of the attribute used in the
server's configuration to identify the IX14 authentication group or groups that the user is a
member of. For example, in
, the group attribute in the sample
tac_plus.conf file is
groupname
, which is also the default setting for the group_attribute in the
IX14 configuration.
(config)> auth group_attribute
attribute-name
(config)>
5. (Optional) Configure the type of service. This is the value of the
service
attribute in the the
server's configuration. For example, in
, the value of the
service
attribute in the sample tac_plus.conf file is
system
, which is also the default setting in
the IX14 configuration.
(config)> auth service
service-name
(config)>
6. (Optional) Enable command authorization, which instructs the device to communicate with the
server to determine if the user is authorized to execute a specific command. Only the
first configured server will be used for command authorization.
(config)> auth command_authorization true
(config)>
7. (Optional) Enable command accounting, which instructs the device to communicate with the
server to log commands that the user executes. Only the first configured
server will be used for command accounting.
(config)> auth command_accounting true
(config)>
8. Add a server:
a. Add the server:
(config)> add auth server end
(config auth server 0)>
b. Enter the server's IP address or hostname:
(config auth server 0)> hostname
hostname|ip-address
(config auth server 0)>
