Tacacs+ Authentication; Adding/Deleting A Tacacs+ Server - Spectracom SecureSync 1200 User Reference Manual

4.3.6

TACACS+ Authentication

Terminal Access Controller Access-Control System Plus (TACACS+) is a protocol that handles
authentication, authorization, and accounting (AAA) services. SecureSync supports pam_
tacplus , allowing users to validate their username/password when logging into SecureSync via
a TACACS+ server. Currently, http/https/ssh/pure-ftpd are supported.
In order to enable TACACS+ for ssh/pure-ftpd, a matching user account needs to be created
locally on the SecureSync unit that matches the account on the TACACS+ server:
For example, a user with the username " user3 " and password " pass3 " on the TACACS+ server
also has to create a " user3 " account on the SecureSync unit before logging in (the password
can be different).
Reference information:
For additional help, see also "RADIUS Authentication" on page 242
4.3.6.1

Adding/Deleting a TACACS+ Server

1.
2.
3.
CHAPTER •
4 SecureSync User Reference Guide Rev. 23
https://en.wikipedia.org/wiki/TACACS
http://www.cisco.com/c/en/us/support/docs/security-vpn/remote-
authentication-dial-user-service-radius/13838-10.html
https://github.com/jeroennijhof/pam_tacplus
Navigate to MANAGEMENT > OTHER: Authentication .
In the Actions panel on the left, click TACACS+ . The TACACS+ Setup window will be
displayed:
Fill out the fields:
4.3 Managing Users and Security
247