cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
933
Views
5
Helpful
4
Replies

Can ACS run commands at logon for specific users?

Cliff Rosson
Level 1
Level 1

I have a scenario where I'd like a command run at the time a user logs into the device. Can ACS do this on behalf of the user during the logon process?

1 Accepted Solution

Accepted Solutions

Jagdeep Gambhir
Level 10
Level 10

Cliff,

We need to use Tacacs attribute "Auto Command"

Regards,

~JG

DO rate helpful posts!

View solution in original post

4 Replies 4

askhuran
Level 1
Level 1

Hello Cliff,

A command to be run, on behalf of the user - Where the command is to be executed? and most importantly, during the logon process. Please elaborate your requirement in detail

Sure. Bigip LTM, once authenticated, drops users into what is called a TMSH shell. This breaks rancid since rancid expects to be in a bash shell.

You can access bash from TMSH via a command(run util bash). I'd like ACS to pass this command and run it the moment the rancid user logs in. That way subsoquent commands from rancid will work since he will at that point be at a bash prompt.

Basically a logon script that runs commands for the user at the time the user logs in.

Jagdeep Gambhir
Level 10
Level 10

Cliff,

We need to use Tacacs attribute "Auto Command"

Regards,

~JG

DO rate helpful posts!

Awesome JG. It works great!