[c-nsp] TACACS "emergency" password management

Nick Hilliard nick at foobar.org
Mon Nov 1 18:06:03 EDT 2010


On 01/11/2010 21:13, Nick Hilliard wrote:
> It does, yes.  But it also authorises anything if you're authenticated.
> You may not want this.

Saku Ytti points out that "if-authenticated" will Do The Right Thing.  i.e.
if authenticated locally, it will not bother trying to contact a tacacs+
server.  However, if authenticated remotely, it will.

Nick


More information about the cisco-nsp mailing list