<div dir="ltr">I meant like below per tac_plus.conf man page<div><br></div><div><div>cmd-match</div><div> Specify a command argument match.</div><div><br></div><div> <permission> <regex></div><div> <permission> <regex></div></div><div><br></div><div>In the regex may be some expression that become NUL based on timestamp? I do not have any example. </div><div><br></div><div>Thanks for your help!</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Apr 8, 2017 at 6:22 PM, John Fraizer <span dir="ltr"><<a href="mailto:john@op-sec.us" target="_blank">john@op-sec.us</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>That is not supported by tac_plus.</div><div class="HOEnZb"><div class="h5"><div><br><div class="gmail_quote"><div>On Sat, Apr 8, 2017 at 3:21 PM Asif Iqbal <<a href="mailto:vadud3@gmail.com" target="_blank">vadud3@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="m_-2391347273129538988gmail_msg">I am not using do_auth.py yet. I was wondering if the regex can be used to logic the time of the day permit will work until then?</div><div class="gmail_extra m_-2391347273129538988gmail_msg"><br class="m_-2391347273129538988gmail_msg"><div class="gmail_quote m_-2391347273129538988gmail_msg">On Sat, Apr 8, 2017 at 4:42 PM, John Fraizer <span class="m_-2391347273129538988gmail_msg"><<a href="mailto:john@op-sec.us" class="m_-2391347273129538988gmail_msg" target="_blank">john@op-sec.us</a>></span> wrote:<br class="m_-2391347273129538988gmail_msg"><blockquote class="gmail_quote m_-2391347273129538988gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="m_-2391347273129538988gmail_msg">You could modify do_auth.py to do this.</div><div class="m_-2391347273129538988gmail_msg"><br class="m_-2391347273129538988gmail_msg"><div class="gmail_quote m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988m_-3232546170068989260h5 m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988gmail_msg">On Fri, Apr 7, 2017 at 4:15 PM Asif Iqbal <<a href="mailto:vadud3@gmail.com" class="m_-2391347273129538988gmail_msg" target="_blank">vadud3@gmail.com</a>> wrote:<br class="m_-2391347273129538988gmail_msg"></div></div></div><blockquote class="gmail_quote m_-2391347273129538988gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988m_-3232546170068989260h5 m_-2391347273129538988gmail_msg">Hi<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
Is there a way to restrict access to routers with tacacs config based on<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
time?<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
So not allow someone to make any change to the config during work hours?<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
I will need to apply something like that short from doing some config swap<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
with allow/deny as a cronjob.<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
Thanks<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
--<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
Asif Iqbal<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
PGP Key: 0xE62693C5 KeyServer: <a href="http://pgp.mit.edu" rel="noreferrer" class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg" target="_blank">pgp.mit.edu</a><br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
A: Because it messes up the order in which people normally read text.<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
Q: Why is top-posting such a bad thing?<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg"></div></div>
-------------- next part --------------<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
An HTML attachment was scrubbed...<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
URL: <<a href="http://www.shrubbery.net/pipermail/tac_plus/attachments/20170407/3d926439/attachment.html" rel="noreferrer" class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg" target="_blank">http://www.shrubbery.net/<wbr>pipermail/tac_plus/<wbr>attachments/20170407/3d926439/<wbr>attachment.html</a>><br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
______________________________<wbr>_________________<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
tac_plus mailing list<br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
<a href="mailto:tac_plus@shrubbery.net" class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg" target="_blank">tac_plus@shrubbery.net</a><br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
<a href="http://www.shrubbery.net/mailman/listinfo/tac_plus" rel="noreferrer" class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg" target="_blank">http://www.shrubbery.net/<wbr>mailman/listinfo/tac_plus</a><span class="m_-2391347273129538988m_-3232546170068989260HOEnZb m_-2391347273129538988gmail_msg"><font color="#888888" class="m_-2391347273129538988gmail_msg"><br class="m_-2391347273129538988m_-3232546170068989260m_-1005739419159729309gmail_msg m_-2391347273129538988gmail_msg">
</font></span></blockquote></div></div><span class="m_-2391347273129538988m_-3232546170068989260HOEnZb m_-2391347273129538988gmail_msg"><font color="#888888" class="m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988gmail_msg">-- <br class="m_-2391347273129538988gmail_msg"></div><div data-smartmail="gmail_signature" class="m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988gmail_msg">--</div>John Fraizer<div class="m_-2391347273129538988gmail_msg">LinkedIn profile: <a href="http://www.linkedin.com/in/johnfraizer/" class="m_-2391347273129538988gmail_msg" target="_blank">http://www.linkedin.com/in/<wbr>johnfraizer/</a></div><div class="m_-2391347273129538988gmail_msg"><br class="m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988gmail_msg"><span style="color:rgb(53,53,53);font-family:Arial,sans-serif;font-size:12px;line-height:12px;background-color:rgb(244,244,244)" class="m_-2391347273129538988gmail_msg"><br class="m_-2391347273129538988gmail_msg"></span></div></div></div></div>
</font></span></blockquote></div><br class="m_-2391347273129538988gmail_msg"><br clear="all" class="m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988gmail_msg"><br class="m_-2391347273129538988gmail_msg"></div>-- <br class="m_-2391347273129538988gmail_msg"><div class="m_-2391347273129538988m_-3232546170068989260gmail_signature m_-2391347273129538988gmail_msg" data-smartmail="gmail_signature">Asif Iqbal<br class="m_-2391347273129538988gmail_msg">PGP Key: 0xE62693C5 KeyServer: <a href="http://pgp.mit.edu" class="m_-2391347273129538988gmail_msg" target="_blank">pgp.mit.edu</a><br class="m_-2391347273129538988gmail_msg">A: Because it messes up the order in which people normally read text.<br class="m_-2391347273129538988gmail_msg">Q: Why is top-posting such a bad thing?<br class="m_-2391347273129538988gmail_msg"><br class="m_-2391347273129538988gmail_msg"></div>
</div>
</blockquote></div></div><div dir="ltr">-- <br></div><div data-smartmail="gmail_signature"><div dir="ltr"><div>--</div>John Fraizer<div>LinkedIn profile: <a href="http://www.linkedin.com/in/johnfraizer/" target="_blank">http://www.linkedin.com/in/<wbr>johnfraizer/</a></div><div><br><div><span style="color:rgb(53,53,53);font-family:Arial,sans-serif;font-size:12px;line-height:12px;background-color:rgb(244,244,244)"><br></span></div></div></div></div>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">Asif Iqbal<br>PGP Key: 0xE62693C5 KeyServer: <a href="http://pgp.mit.edu" target="_blank">pgp.mit.edu</a><br>A: Because it messes up the order in which people normally read text.<br>Q: Why is top-posting such a bad thing?<br><br></div>
</div>