-
Notifications
You must be signed in to change notification settings - Fork 25
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
tac_plus-ng: add PAM demo config sample
- Loading branch information
1 parent
684d826
commit 7a10fdc
Showing
1 changed file
with
25 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
#!/usr/local/bin/tactrace.pl --conf | ||
# | ||
# Sample config file for tac_plus-ng with pammavis or pammavis-mt backend. | ||
# | ||
# chmod 755 it and run it for seeing tactrace.pl output. | ||
# | ||
|
||
id = spawnd { | ||
background = no | ||
single process = yes | ||
listen { port = 4949 } | ||
} | ||
|
||
id = tac_plus-ng { | ||
# single--threaded backend, | ||
mavis module demo = external { exec = /usr/local/sbin/pammavis pammavis -s sshd } | ||
# Or, using the multi-threaded backend: | ||
# mavis module demo-mt = external-mt { exec = /usr/local/sbin/pammavis-mt pammavis-mt -s sshd } | ||
user backend = mavis # retrieve user data from backend | ||
login backend = mavis # use backend for user login authentication | ||
pap password = login # map pap password to login password | ||
device world { address = 0.0.0.0/0 key = demo } | ||
profile demo { script {if (service == shell) { if (cmd == "") set priv-lvl = 15 permit } } } | ||
ruleset { rule demo-rule { script { profile = demo permit } } } | ||
} |