Avocent MERGEPOINT 53XX SP MANAGER Installer/User Manual page 112

98 MergePoint Service Processor Manager SP53XX Installer/User Guide
• The TACACS+ server's administrator must define the desired groups and assign users to
the groups.
• The MergePoint SP manager administrator must configure the TACACS+ server on
the MergePoint SP manager and set up the TACACS+ server for raw access. For more
information see Configuring a TACACS+ authentication server on the MergePoint SP
manager on page 98.
The following CLI utility command line can also be used to configure a server for raw access:
cli> set auth tacplus service raccess
To assign a group to a user on the TACACS+ server:
1. Add a definition for the group to the authentication authorization accounting (AAA) database
on the TACACS+ server.
NOTE: These additions can be made through a GUI. The example shows the configuration if a GUI is
not available.
###########################################################
# Group Definitions
###########################################################
group = group_name {
...
}
2. To the definition for each user, add the raccess service in the form service = raccess and assign
the desired group to the user in the form member = group_name.
NOTE: Each user may belong to only one group. To give a user administrative access to the MergePoint SP
manager, assign the admin group.
###########################################################
# User Definitions
###########################################################
user = username {
}
Configuring a TACACS+ authentication server on the MergePoint SP manager
The following list defines the values that must be defined in the MergePoint SP manager's /etc/
tacplus.conf file.
service = raccess
member = group_name