[tac_plus] Re: question about tac_plus

[Jesse Zbikowski]

On Tue, Oct 28, 2008 at 8:18 PM, Ian Batterbee <ibatterb at gmail.com> wrote:
> I'm still a bit confused about the configuration
> file syntax. Is there a reference for it somewhere I can read ?

Please see "man 5 tac_plus.conf".  Here is some example server side
configuration.  You will have to process the A/V pairs on the client
to make use of the custom "usergroup" attribute.

# tac_plus.conf
user = tryme {
        pap = cleartext tryme
        service=ppp protocol=users {}
        after authorization "/usr/local/tac/postauth $user"
}

# /usr/local/tac/postauth

#!/usr/bin/perl
my $user = shift @ARGV;
while (<STDIN>) {
    print; # pass A/V pairs from tac_plus
}
if ($user eq 'tryme') {
    print "usergroup=administrator\n"; # new A/V pair
    exit 2; # send A/V pairs to client
} else {
    exit 1; # fail
}