Service manual

44 Cyclades ACS 5000 Advanced Console Server Command Reference Guide
To configure a TACACS+ authentication server:
1. On the server, add raccess service to the user configuration.
2. Define to which group or groups the user belongs.
user = <username>{
global = cleartext “<password>”
service = raccess{
group_name = <Group1>[,<Group2,...,GroupN>];
}
}
To configure user permission on the TACACS+ server:
1. On the TACACS+ server, open the file /etc/tacacs/tac_plus.cfg.
NOTE: The location of this configuration file may be different on your Linux distribution.
2. Edit the parameters as per the following example. Refer to Table 3.7 for descriptions.
user = tomj{
name = "Tom Jones"
service = raccess {
port1 = LAB2/ttyS2
port2 = 192.168.0.1/ttyS1
port3 = CAS/ttyS1
port4 = 172.32.20.10/ttyS6
port5 = LAB1/ttyS7
port6 = Knuth/ttyS16
}
}
Table 3.7: Parameters for Specifying User Authorization on a TACACS+ Server
Parameter Description
user = <username> Defines the username as specified on the console server.
name = <"optional
description">
To specify additional information about the user (optional).
This parameter must include quotes. The maximum number of characters
allowed is 256. Adding more than 256 characters stops the server from
restarting and produces a FAILED message at the time of authorization.