Tacacs and etc/shadow

daskiew · 05-22-2002, 04:40 AM

Hi

I have some cisco switchs, I use Tacacs+ for authetification with static password, now, I would like to use the file /etc/shadow to configure dynamic password users.

Where can I find some informations to do that.

THX for your help.

condurre · 03-28-2003, 03:17 AM

If you are using tac_plus from ftp://ftpeng.cisco.com/pub/tacacs/ under linux then do the following:

Edit tac_plus.h and look for the following:

/* Define this if you have shadow passwords in /etc/passwd and
* /etc/shadow. Note that you usually need to be root to read
* /etc/shadow */
/* #define SHADOW_PASSWORDS */

Change the

/* #define SHADOW_PASSWORDS */

to just

#define SHADOW_PASSWORDS

Recompile tac_plus.

Add the line "default authentication = file /etc/passwd" into the tac_plus configuration file.

Condurre