[tac_plus] tacacs+ and cisco ios chgpass

Alan McKinnon alan.mckinnon at gmail.com
Wed Apr 3 08:56:26 UTC 2013


On 02/04/2013 21:13, Sébastien Pepin wrote:
> Hi,
> 
> I wonder if this function is supported in your tacacs+ release ...
> 
> If I configure an Cisco ACS I can you this feature to let the user change
> their password by entering their username and hitting return for the
> password... then the acs ask for old and new password ...
> 
> But when I try this with your tacacs+ release this does not work ...  is it
> something that only cisco support ? could this feature be added to the
> wishlist :)
> 
> thanks
> 
> 

This is not supported in tac_plus.
The server only uses and reads the backend auth store, it never changes it.

Easiest is to have tac_plus use /etc/passwd and /etc/shadow for password
hashes then use normal Unix methods to allow user to change their password



-- 
Alan McKinnon
alan.mckinnon at gmail.com



More information about the tac_plus mailing list