[c-nsp] TACACS "emergency" password management
Nick Hilliard
nick at foobar.org
Mon Nov 1 18:06:03 EDT 2010
On 01/11/2010 21:13, Nick Hilliard wrote:
> It does, yes. But it also authorises anything if you're authenticated.
> You may not want this.
Saku Ytti points out that "if-authenticated" will Do The Right Thing. i.e.
if authenticated locally, it will not bother trying to contact a tacacs+
server. However, if authenticated remotely, it will.
Nick
More information about the cisco-nsp
mailing list