External auth config

[jiyebae]

Hi,

I'd like to test the ldap auth in NSO. the current ncs.conf set as below, please do let me know which param needs to be modified and also is there any required script for ldap integration? cause i am seeing the <executable>my-test-aut.sh</executable> in original ncs.conf

<aaa>

<ssh-server-key-dir>${NCS_CONFIG_DIR}/ssh</ssh-server-key-dir>

<external-authentication>

   <enabled>true</enabled>

   <executable>/opt/ncs-run/tacacs_auth</executable>

</external-authentication>

<pam>

    <enabled>true</enabled>

    <service>system-auth</service>

</pam>

<local-authentication>

<enabled>false</enabled>

  </local-authentication>

</aaa>

[mijelici]

You have to create your own script for LDAP authentication and reference it in the <executable> tag of ncs.conf. Also make sure NSO has the permissions to run it.

[lmanor · Accepted solution]

Video on External Authentication highlighting LDAP can be seen here:

Video Link : 16488