[tac_plus] Re: Authorization script and before authorization

Kiss Gabor (Bitman) kissg at ssg.ki.iif.hu
Wed May 12 04:34:24 UTC 2010


> > > Basically, I need 2 args, the ip of the device where we are trying to
> > > execute the command ($ip I guess) and the command itself. But I don't


> 2° I go in enable and then configure mode.
> 3° I enter the command no interface GigabitEthernet0/1.114 (for example)
> 4° When I enter the previous command, I would like to run an authorization 
> script on the no interface command. The script will be on the same host than 

Oh I see. :-) "The command to be authorized".
I guessed you mean a command to execute on TACACS+ server.

> Where $ip should be (I guess) the IP address of the Cisco router.
> With that sample, I'm still missing the whole command as an argument of my 
> script (/usr/local/bin/script don't know what to check).
> 
> Do you know how to pass the command as an argument to the script ?

Actually I don't know such a possibility.
However I think you are able to modify the source code quite easily
in order to get a new dollar variable.

Regards

Gabor

-- 
E-mail = m-mail * c-mail ^ 2


More information about the tac_plus mailing list