<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Oh also I removed all the comments from the config file that's why its
referencing line 50. It looks to me like it just doesn't like the pap
= PAM, if I switch to login = PAM it works fine.<br>
<br>
-J<br>
<br>
Jason Jeremias wrote:
<blockquote cite="mid:4AB96B46.3090502@uui-alaska.com" type="cite">
<meta content="text/html;charset=us-ascii" http-equiv="Content-Type">
When I run it I get.<br>
root@ns02:/usr/local/src/tac_plus_v9a# /usr/local/bin/tac_plus -C
/etc/tacacs/tac_plus.cfg -d 16<br>
Error: expecting 'cleartext', or 'des' keyword after 'pap =' on line 50<br>
<br>
So to check that I have pam I did a:<br>
root@ns02:/usr/local/src/tac_plus_v9a# /usr/local/bin/tac_plus -v<br>
tac_plus version F4.0.4.19<br>
ACLS<br>
FIONBIO<br>
LIBWRAP<br>
LINUX<br>
LITTLE_ENDIAN<br>
LOG_DAEMON<br>
PAM<br>
NO_PWAGE<br>
REAPCHILD<br>
RETSIGTYPE RETSIGTYPE<br>
SHADOW_PASSWORDS<br>
SIGTSTP<br>
SIGTTIN<br>
SIGTTOU<br>
SO_REUSEADDR<br>
STRERROR<br>
TAC_PLUS_PORT<br>
UENABLE<br>
__STDC__<br>
<br>
This told me that I do indeed have PAM compiled in.<br>
<br>
<br>
Here's my config file.<br>
root@ns02:/usr/local/src/tac_plus_v9a# cat /etc/tacacs/tac_plus.cfg<br>
<br>
key = testing12345 <br>
<br>
# Now tacacs+ also use default PAM authentication<br>
#default authentication = pap PAM <br>
<br>
# Accounting records log file<br>
<br>
accounting file = /var/log/tac_acc.log<br>
<br>
user = DEFAULT {<br>
#service = ppp protocol = lcp { idletime = 15 }<br>
#service = ppp protocol = ip {}<br>
#pap = PAM <br>
#maxsess = 2<br>
member = DEFAULT <br>
}<br>
<br>
group = DEFAULT {<br>
service = ppp protocol = ip {}<br>
pap = PAM<br>
#maxsess = 2<br>
}<br>
<br>
<br>
root@ns02:/usr/local/src/tac_plus_v9a# <br>
<br>
<br>
<br>
john heasley wrote:
<blockquote cite="mid:20090923002035.GS8353@shrubbery.net" type="cite">
<pre wrap="">Tue, Sep 22, 2009 at 03:26:34PM -0800, Jason Jeremias:
</pre>
<blockquote type="cite">
<pre wrap="">I downloaded the latest tac_plus software but I can't seem to get pap =
PAM to work is this possible? I need to authenticate ppp uses against pam.
</pre>
</blockquote>
<pre wrap=""><!---->
did you make any effort to use daemon debugging options to debug the
problem that you'd like to mention?
</pre>
</blockquote>
<br>
</blockquote>
<br>
</body>
</html>