Hello,<br><br>I am trying to configure tacacs+-F4.0.4.19 for using it with Juniper for authentication. I have done the configuration as given below for allow/deny commands.<br><br>--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br>
service = junos-exec {<br>allow-configuration = "(interfaces .* ethernet-switching .*)|(protocols ospf area)|(protocols ospf backup-spf-options)|(protocols ospf export)|(protocols ospf import)|(protocols ospf external-preference)|(routing-options static route)"<br>
deny-configuration = "(.* traceoptions)|(system)|(chassis)|(interfaces lo0)|(firewall)|(routing-options router-id)|(routing-options nonstop-routing)|(protocols bgp local-as)|(protocols mstp .*)|(protocols ospf disable)|(protocols ospf database-protection)"<br>
allow-commands = "(clear interfaces statistics .*)|(ping .*)|(traceroute .*)|(show log messages .*)"<br>deny-commands = "(request)|(restart)|(start.*)|(test)|(clear .*)|(file)|(op)|(set)|(start)|(show system .*)|(edit)|(configure)"<br>
}<br>------------------------------------------------------------------------------------------------------------------------------------------------------------------<br>Now with this when i try to start the server it gives the bellow error,<br>
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br>Starting TACACS+ Daemon: tac_plus*** buffer overflow detected ***: /opt/tac-plus/bin/tac_plus terminated<br>
======= Backtrace: =========<br>/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x50)[0xb76c0390]<br>/lib/tls/i686/cmov/libc.so.6(+0xe12ca)[0xb76bf2ca]<br>/lib/tls/i686/cmov/libc.so.6(+0xe05fa)[0xb76be5fa]<br>/opt/tac-plus/bin/tac_plus[0x804d287]<br>
/opt/tac-plus/bin/tac_plus[0x804d4e8]<br>/opt/tac-plus/bin/tac_plus[0x804e886]<br>/opt/tac-plus/bin/tac_plus[0x804e8e8]<br>/opt/tac-plus/bin/tac_plus[0x8058f49]<br>/opt/tac-plus/bin/tac_plus[0x805949a]<br>/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0xb75f4bd6]<br>
/opt/tac-plus/bin/tac_plus[0x8049ee1]<br>======= Memory map: ========<br>08048000-0805f000 r-xp 00000000 08:01 2097163 /opt/tac-plus/bin/tac_plus<br>0805f000-08060000 r--p 00016000 08:01 2097163 /opt/tac-plus/bin/tac_plus<br>
08060000-08061000 rw-p 00017000 08:01 2097163 /opt/tac-plus/bin/tac_plus<br>08061000-08063000 rw-p 00000000 00:00 0<br>087e0000-08801000 rw-p 00000000 00:00 0 [heap]<br>b75b8000-b75d5000 r-xp 00000000 08:01 1572919 /lib/libgcc_s.so.1<br>
b75d5000-b75d6000 r--p 0001c000 08:01 1572919 /lib/libgcc_s.so.1<br>b75d6000-b75d7000 rw-p 0001d000 08:01 1572919 /lib/libgcc_s.so.1<br>b75dc000-b75de000 rw-p 00000000 00:00 0<br>b75de000-b7731000 r-xp 00000000 08:01 1573227 /lib/tls/i686/cmov/<a href="http://libc-2.11.1.so">libc-2.11.1.so</a><br>
b7731000-b7732000 ---p 00153000 08:01 1573227 /lib/tls/i686/cmov/<a href="http://libc-2.11.1.so">libc-2.11.1.so</a><br>b7732000-b7734000 r--p 00153000 08:01 1573227 /lib/tls/i686/cmov/<a href="http://libc-2.11.1.so">libc-2.11.1.so</a><br>
b7734000-b7735000 rw-p 00155000 08:01 1573227 /lib/tls/i686/cmov/<a href="http://libc-2.11.1.so">libc-2.11.1.so</a><br>b7735000-b7738000 rw-p 00000000 00:00 0<br>b7738000-b774d000 r-xp 00000000 08:01 1573256 /lib/tls/i686/cmov/<a href="http://libpthread-2.11.1.so">libpthread-2.11.1.so</a><br>
b774d000-b774e000 r--p 00014000 08:01 1573256 /lib/tls/i686/cmov/<a href="http://libpthread-2.11.1.so">libpthread-2.11.1.so</a><br>b774e000-b774f000 rw-p 00015000 08:01 1573256 /lib/tls/i686/cmov/<a href="http://libpthread-2.11.1.so">libpthread-2.11.1.so</a><br>
b774f000-b7751000 rw-p 00000000 00:00 0<br>b7751000-b775a000 r-xp 00000000 08:01 1573232 /lib/tls/i686/cmov/<a href="http://libcrypt-2.11.1.so">libcrypt-2.11.1.so</a><br>b775a000-b775b000 r--p 00008000 08:01 1573232 /lib/tls/i686/cmov/<a href="http://libcrypt-2.11.1.so">libcrypt-2.11.1.so</a><br>
b775b000-b775c000 rw-p 00009000 08:01 1573232 /lib/tls/i686/cmov/<a href="http://libcrypt-2.11.1.so">libcrypt-2.11.1.so</a><br>b775c000-b7783000 rw-p 00000000 00:00 0<br>b7783000-b7796000 r-xp 00000000 08:01 1573241 /lib/tls/i686/cmov/<a href="http://libnsl-2.11.1.so">libnsl-2.11.1.so</a><br>
b7796000-b7797000 r--p 00012000 08:01 1573241 /lib/tls/i686/cmov/<a href="http://libnsl-2.11.1.so">libnsl-2.11.1.so</a><br>b7797000-b7798000 rw-p 00013000 08:01 1573241 /lib/tls/i686/cmov/<a href="http://libnsl-2.11.1.so">libnsl-2.11.1.so</a><br>
b7798000-b779b000 rw-p 00000000 00:00 0<br>b779b000-b779f000 r-xp 00000000 08:01 2097156 /opt/tac-plus/lib/libtacacs.so.1.0.0<br>b779f000-b77a0000 r--p 00003000 08:01 2097156 /opt/tac-plus/lib/libtacacs.so.1.0.0<br>
b77a0000-b77a1000 rw-p 00004000 08:01 2097156 /opt/tac-plus/lib/libtacacs.so.1.0.0<br>b77a1000-b77a8000 r-xp 00000000 08:01 1577063 /lib/libwrap.so.0.7.6<br>b77a8000-b77a9000 r--p 00006000 08:01 1577063 /lib/libwrap.so.0.7.6<br>
b77a9000-b77aa000 rw-p 00007000 08:01 1577063 /lib/libwrap.so.0.7.6<br>b77ae000-b77b1000 rw-p 00000000 00:00 0<br>b77b1000-b77b2000 r-xp 00000000 00:00 0 [vdso]<br>b77b2000-b77cd000 r-xp 00000000 08:01 1572959 /lib/<a href="http://ld-2.11.1.so">ld-2.11.1.so</a><br>
b77cd000-b77ce000 r--p 0001a000 08:01 1572959 /lib/<a href="http://ld-2.11.1.so">ld-2.11.1.so</a><br>b77ce000-b77cf000 rw-p 0001b000 08:01 1572959 /lib/<a href="http://ld-2.11.1.so">ld-2.11.1.so</a><br>bffab000-bffc0000 rw-p 00000000 00:00 0 [stack]<br>
Aborted<br>.<br>----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br>
<br>Can anybody help me to overcome this problem?<br><br>Thanks in advance.<br><br>Yagnesh<br><br>