topic Re: Local authentication shouldn't work when TACACS authentication is configured in Firewall and Security Management

Local authentication shouldn't work when TACACS authentication is configured

nagaraja_cs — Tue, 28 Jul 2020 07:08:20 GMT

Hi Team,

We have configured TACACS authentication for Firewall.

User are able to authenticate from TACACS server.

But local user authentication shouldn't work when TACACS is working.

Local authentication should work only when TACACS server is not working.

Is there any priority to set TACACS as high priority ?

Re: Local authentication shouldn't work when TACACS authentication is configured

nagaraja_cs — Mon, 03 Aug 2020 06:42:37 GMT

Hi Team,

Is there any solution for this ?

Re: Local authentication shouldn't work when TACACS authentication is configured

G_W_Albrecht — Mon, 03 Aug 2020 09:05:23 GMT

Afaik local user auth always is enabled as a fallback. See sk111572 Authentication on Gaia OS from console with local user fails (times out) while two RADIUS servers are configured:

Code was improved: Local authentication will have priority over RADIUS authentication.

Re: Local authentication shouldn't work when TACACS authentication is configured

nagaraja_cs — Mon, 03 Aug 2020 09:21:54 GMT

Hi Albrecht,

Thank you for the information.

Here local authentication shouldn't work when TACACS authentication is active.Local authentication should work only if the TACACS auth fails.

Is there any priority setting ?

First Priority --- > TACACS Aunthentication.

Second Priority ---> Local Authentication.

Re: Local authentication shouldn't work when TACACS authentication is configured

G_W_Albrecht — Mon, 03 Aug 2020 09:32:04 GMT

First priority always is Local Authentication, see sk111572.

Re: Local authentication shouldn't work when TACACS authentication is configured

John_Fleming — Thu, 27 Nov 2025 12:54:54 GMT

sk105320 (does not exist anymore) - How to disable local authentication when RADIUS authentication is available

This is for radius but might be very close for tacacs. Would need to play around with it to see. Its all PAM under the hood so my guess is it should work.