[tac_plus] Adding users to tacacs passwd file

[Jeffrey S. Geist]

Hi,

It seems that tacacs is not able to get the encrypted password from the
/etc/shadow file. If the tac_plus.cfg is configured with

 "default authentication = file /etc/passwd"

If we copy the encrypted password from /etc/shadow for a particular user and
then replace "x" in the /etc/passwd file for that same user with the
encrypted passwd, it works!

Hope this can shed some light on our issue...


-----Original Message-----
From: 'john heasley' [mailto:heas at shrubbery.net] 
Sent: Wednesday, August 18, 2010 2:17 PM
To: Jeffrey S. Geist
Cc: 'john heasley'; dterry at dollartree.com; Jarrod Ronhovde;
tac_plus at shrubbery.net; Mark Urbach
Subject: Re: [tac_plus] Adding users to tacacs passwd file

Wed, Aug 18, 2010 at 12:52:56PM -0500, Jeffrey S. Geist:
> We created the symbolic link:
> 
> lrwxrwxrwx  1 root root      11 Aug 18 12:32 tac_plus.pwd -> /etc/passwd
> 
> and edited the tac_plus.cfg with "default authentication = file
> /etc/tac_plus.pwd".
> 
> However, this did not correct the issue.

hrm, not sure why it wouldnt.  look at the syslog and -d option for
password debugging.