To Next Page

To Previous Page

NOTE: These additions can be made through a GUI. The example shows the configuration if a GUI is not available.

###########################################################

# Group Definitions

###########################################################

group = <group name> {

service = raccess {

group_name = <mergepoint group name>;

}

2. For user definitions, add the password field in the form pap=cleartext xxxxxx and

assign the desired tacacs group to the user in the form member = <tacacs group

name>

###########################################################

# User Definitions

###########################################################

user = <username> {

pap = cleartext xxxxxxx

member = <tacacs defined group name>

}

NOTE: Each user may belong to only one group. To give a user administrative access to the MergePoint SP

manager, create a group on the MergePoint SP manager with the Admin role and then use this group for the value

in the group_name field.

Configuring a TACACS+ authentication server on the MergePoint SP manager

The following list defines the values that must be defined in the MergePoint SP manager’s

/etc/tacplus.conf file.

• authhost1: IP address of the TACACS+ authentication server. A second TACACS+

authentication server can be configured with the parameter authhost2.

• accthost1: IP address of a TACACS+ accounting server, which can be used to track how

long users are connected after being authorized by the authentication server. Its use is

optional. If this parameter is not defined, accounting is not be performed. If the same server

is used for authentication and accounting, both parameters must be defined with the same

address. A second TACACS+ accounting server can be configured with the parameter

accthost2.

• secret: The shared secret (password) necessary for communication between the MergePoint

SP manager and the TACACS+ servers.

• encrypt: The default is 1, enable encryption. A value of 0 means disable encryption.

• service: The service to be enabled, in this case: raccess.

Chapter 6: Administration Tasks Not Performed in the Web Interface 119

Avocent MERGEPOINT SP MANAGER User Manual

Questions and Answers: