Avaya ERS 1600 Technical Configuration Manual page 50

Telnet to Switch with read-only user (ro) type some commands
5510<level-1>> en
5510<level-1># show clock
Current SNTP time
Daylight saving time is DISABLED
Time Zone is set to 'METD', offset from UTC is 01:00
5510<level-1># conf t
%Your command was not authorized
5510<level-1># exit

Read-only user in this example does not have access to switch configuration.
Log file on TACACS server - /var/log/tac_acc.log
Tue Feb 26 14:30:10 2008
10.10.50.10
Tue Feb 26 14:30:27 2008
10.10.50.10
elapsed_time=17 reason=User logged out
Log file on TACACS server - /var/log/tac_plus.log
Depends on debug value configured /etc/rc5.d/S99tac_plus
Tue Feb 26 14:30:10 2008 [16403]: verify: login access for user 'ro' to port
Telnet Session 1 on 10.10.55.6 from 10.10.50.10
Tue Feb 26 14:30:10 2008 [16403]: cfg_check_host_group_access: checking login
access to host '10.10.55.6' for user 'ro'
Tue Feb 26 14:30:10 2008 [16403]: cfg_check_host_group_access: access
permittedbecause host not defined
Tue Feb 26 14:30:10 2008 [16403]: verify: using user/group auth parameters
Tue Feb 26 14:30:10 2008 [16403]: verify: Using auth_method cleartext(11)
with data readonly
Tue Feb 26 14:30:10 2008 [16403]: Password has not expired Dec 31 2008
Tue Feb 26 14:30:10 2008 [16403]: verify: login cleartext authentication
successful
Tue Feb 26 14:30:10 2008 [16403]: default_fn: login query for 'ro' Telnet
Session 1 from 10.10.55.6 accepted
Tue Feb 26 14:30:10 2008 [16404]: Start accounting request
Tue Feb 26 14:30:10 2008 [16404]: 'Tue Feb 26 14:30:10 2008
ro Telnet Session 1
in'
Tue Feb 26 14:30:10 2008 [16405]: Start authorization request
Authentication, Authorization and Accounting (AAA) for ERS and ES
November 2010
: 2008-02-26 14:33:17 GMT+01:00
10.10.55.6
start reason=User logged in
10.10.55.6
stop start_time=1631962
10.10.50.10
Technical Configuration Guide
ro Telnet Session 1
ro Telnet Session 1
stop_time=1631979
10.10.55.6
start reason=User logged
avaya.com
50