sonic-buildimage/files/image_config/hostcfgd
Renuka Manavalan 238db1e06a [tacacs]: skip accessing tacacs servers for local non-tacacs users (#2843)
* Switch the nss look up order as "compat" followed by "tacplus".
This helps use the legacy passwd file for user info and go to tacacs only if not found.
This means, we never contact tacacs for local users like "admin".
This isolates local users from any issues with tacacs servers.
W/o this fix, the sudo commands by local users could take <count of servers> * <tacacs timeout> seconds, if the tacacs servers are unreachable.

* Skip tacacs server access for local non-tacacs users.
Revert the order of 'compat tacplus' to original 'tacplus compat' as tacplus
access is required for all tacacs users, who also get created locally.
2019-05-20 18:59:26 +00:00
..
common-auth-sonic.j2 tacacs management vrf changes (#2217) 2018-12-04 10:22:48 -08:00
hostcfgd [hostcfgd] -- Fix the default for failthrough as false. 2019-04-08 23:41:51 +00:00
hostcfgd.service Move all minigraph-related action from rc.local to updategraph (#1452) 2018-03-09 17:17:08 -08:00
tacplus_nss.conf.j2 [tacacs]: skip accessing tacacs servers for local non-tacacs users (#2843) 2019-05-20 18:59:26 +00:00