[tac_plus] Authorization script and before authorization

[Henry-Nicolas Tourneur]

Hi,


I would like to build an authorization script and make every command like no
interface ... to be checked by that script.


So basically, I would like something like :


 


cmd = no interface {


    before authorization "/usr/local/bin/script $ip";


}


 


The goal is that if the script return 0, then it's ok, overwise, 1 or 3 for
a problem, the command is denied and won't be executed.


Basically, I need 2 args, the ip of the device where we are trying to
execute the command ($ip I guess) and the command itself. But I don't know
how to get the full command as a variable for the script (same for the
argument).


 


Any idea ?


 


Thanks and regards,


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/tac_plus/attachments/20100511/52b75b04/attachment.html