Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[tacacs]: skip accessing tacacs servers for local non-tacacs users #2843

Merged
merged 2 commits into from
May 9, 2019
Merged

[tacacs]: skip accessing tacacs servers for local non-tacacs users #2843

merged 2 commits into from
May 9, 2019

Commits on Apr 30, 2019

  1. Switch the nss look up order as "compat" followed by "tacplus". 

    This helps use the legacy passwd file for user info and go to tacacs only if not found.
This means, we never contact tacacs for local users like "admin".
This isolates local users from any issues with tacacs servers.
W/o this fix, the sudo commands by local users could take <count of servers> * <tacacs timeout> seconds, if the tacacs servers are unreachable.
    @renukamanavalan
    renukamanavalan committed Apr 30, 2019
    Configuration menu
    Copy the full SHA
    425fca4 View commit details
    Browse the repository at this point in the history

Commits on May 6, 2019

  1. Skip tacacs server access for local non-tacacs users. 

    Revert the order of 'compat tacplus' to original 'tacplus compat' as tacplus
access is required for all tacacs users, who also get created locally.
    @renukamanavalan
    renukamanavalan committed May 6, 2019
    Configuration menu
    Copy the full SHA
    45e7754 View commit details
    Browse the repository at this point in the history