dce6d3536b
* [TACACS+]: Add configDB enforcer for TACACS+ * hostcfgd - configDB enforcer for TACACS+, listen configDB to modify the pam configuration for Authentication in host * Add a service script for hostcfgd Signed-off-by: Chenchen Qi <chenchen.qcc@alibaba-inc.com> * [TACACS+]: Generate conf file by template file * Generate common-auth-sonic and tacplus_nss.conf by jinja2 template Signed-off-by: Chenchen Qi <chenchen.qcc@alibaba-inc.com>
26 lines
829 B
Django/Jinja
26 lines
829 B
Django/Jinja
onfiguration for libnss-tacplus
|
|
|
|
# debug - If you want to open debug log, set it on
|
|
# Default: off
|
|
# debug=on
|
|
{% if debug %}
|
|
debug=on
|
|
{% endif %}
|
|
|
|
# server - set ip address, tcp port, secret string and timeout for TACACS+ servers
|
|
# Default: None (no TACACS+ server)
|
|
# server=1.1.1.1:49,secret=test,timeout=3
|
|
{% for server in servers %}
|
|
server={{ server.ip }}:{{ server.tcp_port }},secret={{ server.passkey }},timeout={{ server.timeout }}
|
|
{% endfor %}
|
|
|
|
# user_priv - set the map between TACACS+ user privilege and local user's passwd
|
|
# Default:
|
|
# user_priv=15;pw_info=remote_user_su;gid=1000;group=sudo,docker;shell=/bin/bash
|
|
# user_priv=1;pw_info=remote_user;gid=999;group=docker;shell=/bin/bash
|
|
|
|
# many_to_one - create one local user for many TACACS+ users which has the same privilege
|
|
# Default: many_to_one=n
|
|
# many_to_one=y
|
|
|