[tac_plus] Re: PAP password in file possible?

[Alan McKinnon]

On Tuesday 17 November 2009 22:35:46 Stefan Watermann wrote:
> Hi all,
> 
> I'm currently working on getting authentication to a Cisco NAM2 module
> using TACACS work.
> 
> The box is using PAP and "login  = file <password file>"
> (username:password:::::) does not work.
> 
> Also using "pap = file <password file>" does not work.
> The only thing which worked was "pap = des <encoded password>", which
> I'm using within a group.
> 
> Is it possible to manage the passwords for all of my users in a file?
> I would like to be able to provide a PAP password for each of my users.

I had the same a while back, and resorted to putting "pap = des <encoded 
password>" in the user section. This wasn't a big deal for me as my 
tac_plus.conf is generated on the fly from a backend database which reduces it 
to a mere exercise in string manipulation in perl

Earlier than that I also need to put other password into a file. I determined 
the only place this is supported is for the user's own login password. If I'm 
wrong in this, I'm sure John will be along shortly to correct me :-)

-- 
alan dot mckinnon at gmail dot com