[tac_plus] Re: PAP password in file possible?

[Schmidt, Daniel]

Brought this up couple weeks ago, actually.  Didn't see pap = file as
option in code. 

-----Original Message-----
From: tac_plus-bounces at shrubbery.net
[mailto:tac_plus-bounces at shrubbery.net] On Behalf Of Alan McKinnon
Sent: Tuesday, November 17, 2009 2:09 PM
To: tac_plus at shrubbery.net
Subject: [tac_plus] Re: PAP password in file possible?

On Tuesday 17 November 2009 22:35:46 Stefan Watermann wrote:
> Hi all,
> 
> I'm currently working on getting authentication to a Cisco NAM2 module
> using TACACS work.
> 
> The box is using PAP and "login  = file <password file>"
> (username:password:::::) does not work.
> 
> Also using "pap = file <password file>" does not work.
> The only thing which worked was "pap = des <encoded password>", which
> I'm using within a group.
> 
> Is it possible to manage the passwords for all of my users in a file?
> I would like to be able to provide a PAP password for each of my
users.

I had the same a while back, and resorted to putting "pap = des <encoded

password>" in the user section. This wasn't a big deal for me as my 
tac_plus.conf is generated on the fly from a backend database which
reduces it 
to a mere exercise in string manipulation in perl

Earlier than that I also need to put other password into a file. I
determined 
the only place this is supported is for the user's own login password.
If I'm 
wrong in this, I'm sure John will be along shortly to correct me :-)

-- 
alan dot mckinnon at gmail dot com
_______________________________________________
tac_plus mailing list
tac_plus at shrubbery.net
http://www.shrubbery.net/mailman/listinfo.cgi/tac_plus