[tac_plus] What part of tac_plus daemon configuration does "aaa authorization exec default group tacacs+" command in Cisco IOS TACACS+ client check?

Martin T m4rtntns at gmail.com
Mon Apr 13 08:54:37 UTC 2015


Hi,

in Cisco IOS TACACS+ client there is a command "aaa authorization exec
default group tacacs+". Am I correct that all this command does is to
force TACACS+ client to take account the "service = exec"
configuration snippet in tac_plus daemon configuration file? For
example:

service = exec {
  priv-lvl = 15
  autocmd = "show version"
}


thanks,
Martin


More information about the tac_plus mailing list