topic Re: login into firewalls via WinScp using TACACS users in General Topics

login into firewalls via WinScp using TACACS users

Bulu_N — Mon, 22 Feb 2021 06:36:45 GMT

Hi Team,

kindly suggest a way to login into firewalls via WinScp using TACACS users. As the default shell is etc/cli.sh for all TACACS users which doesn't work via WinScp tool.

All the extended commands are available when creating a role for TACACS. Config_system is missing when creating a custom role.

is Config_system only aviliable for Admin ?

Re: login into firewalls via WinScp using TACACS users

Bulu_N — Tue, 23 Feb 2021 05:05:57 GMT

Hi Checkmates

Please help me to resolve the issue

Re: login into firewalls via WinScp using TACACS users

G_W_Albrecht — Tue, 23 Feb 2021 08:09:29 GMT

I would suggest to contact TAC - although i am not sure if this is a CP issue at all !

Re: login into firewalls via WinScp using TACACS users

_Val_ — Tue, 23 Feb 2021 10:56:46 GMT

sftp/scp login requires bash, not clish, for correct login. If you cannot provide bash as default shell to your admin users, use a dedicated shared account for WinSCP

Re: login into firewalls via WinScp using TACACS users

Bulu_N — Thu, 25 Feb 2021 08:24:13 GMT

Hi Team,

If the server is RADIUS instated of TACACS+ server then we have command to change the default shell /bin/bash but here in this case we have TACACS+ server and as per the sk98733 The default shell /bin/bash for TACACS+ users is not supported.

So our requirement is to change the default shell to /bin/bash for all TACACS user.

I understand that all tacacs user have able to access the expert mode directly.

Kindly suggest if possible