[tac_plus] Re: PAP password in file possible?

john heasley heas at shrubbery.net
Fri Nov 20 20:17:23 UTC 2009


Tue, Nov 17, 2009 at 03:19:14PM -0700, Schmidt, Daniel:
> Brought this up couple weeks ago, actually.  Didn't see pap = file as
> option in code. 

its on my list to add, but i'm amid some conflicting changes right now.

> -----Original Message-----
> From: tac_plus-bounces at shrubbery.net
> [mailto:tac_plus-bounces at shrubbery.net] On Behalf Of Alan McKinnon
> Sent: Tuesday, November 17, 2009 2:09 PM
> To: tac_plus at shrubbery.net
> Subject: [tac_plus] Re: PAP password in file possible?
> 
> On Tuesday 17 November 2009 22:35:46 Stefan Watermann wrote:
> > Hi all,
> > 
> > I'm currently working on getting authentication to a Cisco NAM2 module
> > using TACACS work.
> > 
> > The box is using PAP and "login  = file <password file>"
> > (username:password:::::) does not work.
> > 
> > Also using "pap = file <password file>" does not work.
> > The only thing which worked was "pap = des <encoded password>", which
> > I'm using within a group.
> > 
> > Is it possible to manage the passwords for all of my users in a file?
> > I would like to be able to provide a PAP password for each of my
> users.
> 
> I had the same a while back, and resorted to putting "pap = des <encoded
> 
> password>" in the user section. This wasn't a big deal for me as my 
> tac_plus.conf is generated on the fly from a backend database which
> reduces it 
> to a mere exercise in string manipulation in perl
> 
> Earlier than that I also need to put other password into a file. I
> determined 
> the only place this is supported is for the user's own login password.
> If I'm 
> wrong in this, I'm sure John will be along shortly to correct me :-)
> 
> -- 
> alan dot mckinnon at gmail dot com
> _______________________________________________
> tac_plus mailing list
> tac_plus at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/tac_plus
> _______________________________________________
> tac_plus mailing list
> tac_plus at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/tac_plus


More information about the tac_plus mailing list