edit in tac_plus.conf (related with that).
key = "secret"
accounting file = /var/log/tac_accounting.log
# * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
# * USERS ADMIN *
# * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
user = admin1{
login = file /etc/passwd
member = admin
enable = file /etc/passwd
}
group = admin {
default service = permit
service = exec {
priv-lvl = 15
}
cmd = show {
permit .*
}
}
group = operator {
default service = deny
service = exec {
priv-lvl = 14
}
cmd = show {
permit .*
}
cmd = ping {
permit .*
}
cmd = traceroute {
permit .*
}
#-------otherswitch--------#
cmd = configuration {
permit show
permit search
}
cmd = port {
permit show
}
cmd = xcvr {
permit show
}
cmd = ring-protection {
permit show
}
cmd = flow {
permit show
permit find
}
cmd = traffic-profiling {
permit show
}
cmd = chassis {
permit show
}
cmd = software {
permit show
}
cmd = license {
permit show
}
cmd = lldp {
permit show
}
}
restart tacac command: sudo /etc/init.d/tacacs_plus restart