[tac_plus] Problem with creating Multiple groups for a single user. (creating composite groups)

Mohan Reddy mreddy at aristanetworks.com
Wed Apr 2 18:23:21 UTC 2014


Alan,
As mentioned by you I used Dan's python script but I did receive a parsing
error . Below is the error details and config details,

2014-04-02 10:44:04,978 [CRITICAL]: Can't open/parse config file:
'/usr/bin/do_auth.ini'
2014-04-02 10:54:53,545 [CRITICAL]: Can't open/parse config file:
'/usr/bin/do_auth.ini'
2014-04-02 10:59:28,184 [CRITICAL]: Can't open/parse config file:
'/usr/bin/do_auth.ini'


--------------------------------------------------------------------------
-------------------------
Configuration in Tacacs_conf file
--------------------------------------------------------------------------
-----------------------------
user = test1 {
        member = doauthaccess
}

group = doauthaccess {
    default service = permit

    service = exec {
        priv-lvl = 15
    }

    after authorization "/usr/bin/python /usr/bin/do_auth.py -i $address
-u $user -d $name -l /usr/bin/log.txt -f /usr/bin/do_auth.ini"
}

--------------------------------------------------------------------------
-------------------------
Configuration in do_auth.ini file
--------------------------------------------------------------------------
-----------------------------

[users]
default =
noprivs
jathan =
vdxgroup
dans =
vdxgroup
test1 =
readonly1

[readonly1]
host_allow =
.*
device_permit =
.*
command_permit =
.*

--------------------------------------------------------------

May I know what might be the issue.

Thanks,
Mohan


More information about the tac_plus mailing list