[tac_plus] Problem with creating Multiple groups for a single user. (creating composite groups)

Alan McKinnon alan.mckinnon at gmail.com
Tue Mar 18 09:00:40 UTC 2014


On 18/03/2014 00:49, Mohan Reddy wrote:
> Hi,
> 
> I am trying to create a composite group to assign it to an user but it's
> not working and tacacs service fails when restarted. Below is the link
> which I followed
> 
> 
> 
> http://www.shrubbery.net/pipermail/tac_plus/2007-August/000125.html

[snip]


> #test
> 
> group = test_all {
> 
> member = readonly1
> 
> member = readonly2
> 
> }



tac_plus supports only one group per user, and that group can be a
member of only one larger group, and so on recursively. So the syntax
you are trying to use will not work

Use Dan's python script do_auth.py, a copy is shipped in the tac_plus
tarball


-- 
Alan McKinnon
alan.mckinnon at gmail.com



More information about the tac_plus mailing list