Testing Command Authorization On Tacacs+ Servers - Cisco Nexus 9000 Series Configuration Manual

Testing Command Authorization on TACACS+ Servers

Command or Action
Step 3 (Optional) show tacacs+ {pending | pending-diff}
Example:
switch(config)# show tacacs+ pending
Step 4 (Optional) tacacs+ commit
Example:
switch(config)# tacacs+ commit
Step 5 exit
Example:
switch(config)# exit
switch#
Step 6 (Optional) show aaa authorization [all]
Example:
switch(config)# show aaa authorization
Step 7 (Optional) copy running-config startup-config
Example:
switch(config)# copy running-config
startup-config
Related Topics
Testing Command Authorization on TACACS+ Servers
You can test the command authorization for a user on the TACACS+ servers.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
92
Enabling TACACS+ , on page 73
Testing Command Authorization on TACACS+
Purpose
The group-list argument consists of a space-delimited list
of TACACS+ server group names. Servers belonging to
this group are contacted for command authorization. The
local method uses the local role-based database for
authorization.
The local method is used only if all the configured server
groups fail to respond and you have configured local as the
fallback method. The default method is local.
If you have not configured a fallback method after the
TACACS+ server group method, authorization fails if all
server groups fail to respond.
If you press Enter at the confirmation prompt, the default
action is n.
Displays the pending TACACS+ configuration.
Applies the TACACS+ configuration changes in the
temporary database to the running configuration.
Exits global configuration mode.
Displays the AAA authorization configuration. The all
keyword displays the default values.
Copies the running configuration to the startup
configuration.
Servers, on page 92
Configuring TACACS+