Digi TX54, User Manual

Page: 760 / 1087

User authentication Terminal Access Controller Access-Control System Plus ()
TX54 User Guide 760
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. (Optional) Prevent other authentication methods from being used if authentication
fails. Other authentication methods will only be used if the server is unavailable.
(config)> auth authoritative true
(config)>
4. (Optional) Configure the group_attribute. This is the name of the attribute used in the
server's configuration to identify the TX54 authentication group or groups that the user is a
member of. For example, in
user configuration , the group attribute in the sample
tac_plus.conf file is groupname , which is also the default setting for the group_attribute in the
TX54 configuration.
(config)> auth group_attribute attribute-name
(config)>
5. (Optional) Configure the type of service. This is the value of the service attribute in the the
server's configuration. For example, in user configuration , the value of the
service attribute in the sample tac_plus.conf file is system , which is also the default setting in
the TX54 configuration.
(config)> auth service service-name
(config)>
6. (Optional) Enable command authorization, which instructs the device to communicate with the
server to determine if the user is authorized to execute a specific command. Only the
first configured server will be used for command authorization.
(config)> auth command_authorization true
(config)>
7. (Optional) Enable command accounting, which instructs the device to communicate with the
server to log commands that the user executes. Only the first configured
server will be used for command accounting.
(config)> auth command_accounting true
(config)>
8. Add a server:
a. Add the server:
(config)> add auth server end
(config auth server 0)>
b. Enter the server's IP address or hostname:
(config auth server 0)> hostname hostname|ip-address
(config auth server 0)>