Can ACS run commands at logon for specific users?

[Cliff Rosson]

I have a scenario where I'd like a command run at the time a user logs into the device. Can ACS do this on behalf of the user during the logon process?

[askhuran]

Hello Cliff,

A command to be run, on behalf of the user - Where the command is to be executed? and most importantly, during the logon process. Please elaborate your requirement in detail

[Cliff Rosson]

Sure. Bigip LTM, once authenticated, drops users into what is called a TMSH shell. This breaks rancid since rancid expects to be in a bash shell.

You can access bash from TMSH via a command(run util bash). I'd like ACS to pass this command and run it the moment the rancid user logs in. That way subsoquent commands from rancid will work since he will at that point be at a bash prompt.

Basically a logon script that runs commands for the user at the time the user logs in.

[Jagdeep Gambhir · Accepted solution]

Cliff,

We need to use Tacacs attribute "Auto Command"

Regards,

~JG

DO rate helpful posts!

[Cliff Rosson]

Awesome JG. It works great!