[tac_plus] after authorization

Ian Batterbee ibatterb at gmail.com
Fri Oct 31 01:55:43 UTC 2008


Hi,

I'm now trying (as suggested by previous posters) to use 'after
authorization "external-process"' in order to provide arbitary AV values
back to the client.

The trouble is that while the config file parses okay, the external script
never gets executed. I've tried "before authorization" as well, with the
same results.

user=test {
   before authorization "/usr/local/tac/postauth $user"
}

Currently, the script writes to a log file in /tmp/, so that I can see if it
runs, and the file is never touched.

I've tried the latest version of tacacs+ from shrubbery.net, with the same
results.

Am I doing something fundamentally wrong here, or does it not work as the
documentation suggests it should ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/tac_plus/attachments/20081031/002e114a/attachment.html 


More information about the tac_plus mailing list