From: Nick Porter <nick@portercomputing.co.uk>
Date: Tue, 1 Aug 2023 15:15:36 +0000 (+0100)
Subject: Improve sample TACACS virtual server
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=78c814942e37906049f3696c8fb46dd58c3e1c42;p=thirdparty%2Ffreeradius-server.git

Improve sample TACACS virtual server
---

diff --git a/raddb/sites-available/tacacs b/raddb/sites-available/tacacs
index 18101fa155d..a055d4808d4 100644
--- a/raddb/sites-available/tacacs
+++ b/raddb/sites-available/tacacs
@@ -313,10 +313,17 @@ server tacacs {
 	}
 
 	#
-	#  Do challenge-response here.
+	#  The automatic state machine will ensure that both User-Name
+	#  and User-Password have been provided by this point making
+	#  ASCII authentication equivalent to PAP.
+	#
+	#  Alternatively, if extra data is requried, set
+	#  &reply.Authentication-Status := Getdata
+	#  to request the extra data, which will be in &User-Message in
+	#  the next packet (if the client provides it)
 	#
 	authenticate ASCII {
-		fail
+		tacacs_pap
 	}
 
 	#