[tac_plus] How can I deny/permit ?

[Alexander Czutka]

Hello,

I´m trying to setup an authorization for a user.

The user should be allowed to do a:

- Show ip
- show ip route

But he shouldn´t execute the commands, which starts with:

- Show ip ospf
- Show ip pim

I tried this, but it didn´t work:

cmd = show {
            permit ip
            deny ip ospf
            }

root at ubuntu-fdry:/# tac_plus -C /etc/tac_plus.conf
Error: expecting '}' but found 'ospf' on line 40
root at ubuntu-fdry:/#

Is this possible ?

Thanks,Alexander