[tac_plus] tacacs+ custom reply messages

heasley heas at shrubbery.net
Sat Feb 21 18:59:33 UTC 2015


Fri, Feb 20, 2015 at 12:01:03PM -0500, Chandan Kumar:
> Hello All,
> 
> I am using tacacs+ server to autheticate Linux machines [CentOS-6] and
> using pam_tacplus.so. The basic authentication works perfect.
> 
> I have a question regarding reply message from tacacs+ server. Unlike
> RADIUS I do not find any "Reply-Message" type of field in server
> configuration of TACPLUS server. Is there any way either during
> authorization or authentication phase to send a custom reply message or any
> flag, which could be used by the pam module to customize user info. [I will
> modify the pam module accordingly]

sorry for the 2nd msg; but in theory you could pass anything that you want
back to the agent with optional AVPs; again see tac_plus.conf.


More information about the tac_plus mailing list