login into firewalls via WinScp using TACACS users

[Bulu_N]

Hi Team,

kindly suggest a way to login into firewalls via WinScp using TACACS users. As the default shell is etc/cli.sh for all TACACS users which doesn't work via WinScp tool.

All the extended commands are available when creating a role for TACACS. Config_system is missing when creating a custom role.

is Config_system only aviliable for Admin ?

[Bulu_N]

Hi Checkmates 

Please help me to resolve the issue

[G_W_Albrecht]

I would suggest to contact TAC - although i am not sure if this is a CP issue at all !

[_Val_]

sftp/scp login requires bash, not clish, for correct login. If you cannot provide bash as default shell to your admin users, use a dedicated shared account for WinSCP

[Bulu_N]

Hi Team,

If the server is RADIUS instated of TACACS+ server then we have command to change the default shell /bin/bash but here in this case we have TACACS+ server and as per the sk98733 The default shell /bin/bash for TACACS+ users is not supported.

So our requirement is to change the default shell to /bin/bash for all TACACS user.

I understand that all tacacs user have able to access the expert mode directly.

Kindly suggest if possible