topic Re: Can ACS run commands at logon for specific users? in Network Access Control

Can ACS run commands at logon for specific users?

Cliff Rosson — Mon, 11 Mar 2019 03:24:15 GMT

I have a scenario where I'd like a command run at the time a user logs into the device. Can ACS do this on behalf of the user during the logon process?

Can ACS run commands at logon for specific users?

askhuran — Tue, 07 May 2013 16:59:09 GMT

Hello Cliff,

A command to be run, on behalf of the user - Where the command is to be executed? and most importantly, during the logon process. Please elaborate your requirement in detail

Can ACS run commands at logon for specific users?

Cliff Rosson — Tue, 07 May 2013 17:48:47 GMT

Sure. Bigip LTM, once authenticated, drops users into what is called a TMSH shell. This breaks rancid since rancid expects to be in a bash shell.

You can access bash from TMSH via a command(run util bash). I'd like ACS to pass this command and run it the moment the rancid user logs in. That way subsoquent commands from rancid will work since he will at that point be at a bash prompt.

Basically a logon script that runs commands for the user at the time the user logs in.

Re: Can ACS run commands at logon for specific users?

Jagdeep Gambhir — Tue, 07 May 2013 18:07:22 GMT

Cliff,

We need to use Tacacs attribute "Auto Command"

Regards,

~JG

DO rate helpful posts!

Can ACS run commands at logon for specific users?

Cliff Rosson — Tue, 07 May 2013 18:54:15 GMT

Awesome JG. It works great!