Improve sample TACACS virtual server

diff --git a/raddb/sites-available/tacacs b/raddb/sites-available/tacacs
index 18101fa155d7a45462fbe780323db4b7d8230f77..a055d4808d4c61e62c16f8c3d5ce414b73ac8cfd 100644 (file)
--- a/raddb/sites-available/tacacs
+++ b/raddb/sites-available/tacacs
@@ -313,10 +313,17 @@ server tacacs {
        }
 
        #
-       #  Do challenge-response here.
+       #  The automatic state machine will ensure that both User-Name
+       #  and User-Password have been provided by this point making
+       #  ASCII authentication equivalent to PAP.
+       #
+       #  Alternatively, if extra data is requried, set
+       #  &reply.Authentication-Status := Getdata
+       #  to request the extra data, which will be in &User-Message in
+       #  the next packet (if the client provides it)
        #
        authenticate ASCII {
-               fail
+               tacacs_pap
        }
 
        #