This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Last revision Both sides next revision | ||
сервис_tacacs [2020/04/24 12:51] val |
сервис_tacacs [2022/03/15 12:22] val [Мониторинг] |
||
---|---|---|---|
Line 6: | Line 6: | ||
===== Установка TACACS+ сервера ===== | ===== Установка TACACS+ сервера ===== | ||
- | ==== Ubuntu/Debian ==== | + | ==== Ubuntu<11/Debian<20 ==== |
<code> | <code> | ||
root@server:~# apt install tacacs+ | root@server:~# apt install tacacs+ | ||
+ | </code> | ||
+ | |||
+ | ==== Docker ==== | ||
+ | |||
+ | * [[https://www.nixcraft.com/t/ubuntu-server-20-04-installing-tacacs/3452|Ubuntu Server 20.04 Installing TACACS+]] | ||
+ | * [[Технология Docker]] | ||
+ | * [[https://hub.docker.com/r/lfkeitel/tacacs_plus|TACACS+ Docker Image]] | ||
+ | |||
+ | <code> | ||
+ | # mkdir tacacs_server | ||
+ | |||
+ | # cd tacacs_server/ | ||
+ | |||
+ | # cat Dockerfile | ||
+ | </code><code> | ||
+ | FROM openswitch/tacacs_server | ||
+ | |||
+ | RUN printf "%s\n%s" '#!/bin/sh' "/usr/local/bin/tac_plus -G -C /etc/tacacs/tac_plus.conf" > /start.sh && chmod +x /start.sh | ||
+ | |||
+ | ENTRYPOINT ["/start.sh"] | ||
+ | </code><code> | ||
+ | # docker build -t corp/tacacs_server . | ||
+ | |||
+ | # mkdir /etc/tacacs+/ | ||
</code> | </code> | ||
Line 19: | Line 43: | ||
New password: tpassword1 | New password: tpassword1 | ||
... | ... | ||
- | |||
- | # :> /etc/tacacs+/tac_plus.conf | ||
# cat /etc/tacacs+/tac_plus.conf | # cat /etc/tacacs+/tac_plus.conf | ||
Line 50: | Line 72: | ||
<code> | <code> | ||
# service tacacs_plus restart | # service tacacs_plus restart | ||
+ | </code> | ||
+ | |||
+ | ==== Docker ==== | ||
+ | <code> | ||
+ | # docker run --name tacacs_server -d -p 49:49 -v /etc/tacacs+/:/etc/tacacs/ -v /var/log/:/var/log/ --restart=always corp/tacacs_server | ||
</code> | </code> | ||
===== Мониторинг ===== | ===== Мониторинг ===== | ||
+ | |||
+ | !!! Файл появится в результате действий пользователя в CLI | ||
+ | |||
<code> | <code> | ||
# tail -f /var/log/tac_plus.acct | # tail -f /var/log/tac_plus.acct | ||
Line 60: | Line 90: | ||
<code> | <code> | ||
- | # cat /etc/tac_plus.conf | + | # cat tac_plus.conf |
</code><code> | </code><code> | ||
key = tackey123 | key = tackey123 |