Forum Discussion

santsboy_145140's avatar
santsboy_145140
Icon for Nimbostratus rankNimbostratus
Dec 01, 2014

When tacacs+ server is UP local authentication should be disable

Hi,   we have added remote authentication through tacacs+ to our LTMs (11.5.1) and it is working as we are able to log in with the tacacs credentials.   what we don't like is that the local adm...
application delivery
LTM
management
security
  • mimlo_61970's avatar
    mimlo_61970
    Dec 01, 2014

    I'd love to be corrected here, but as far as I know, you can't. Pretty much every vendor except Cisco handles it this way from my experience.

     

mimlo_61970's avatar
mimlo_61970
Icon for Cumulonimbus rankCumulonimbus
Dec 02, 2014

Yes, but you have to add the user as a local user to the device. The password will still be handled via TACACS. The reason for this is because to access bash directly, the user needs an entry in /etc/passwd.