haussli / draft-dahm-opsawg-tacacs-security

IETF draft for new tacacs+ security features
1 stars 1 forks source link

is ssh-subsystem relevant if authen_method is not TAC_PLUS_AUTHEN_METH_SSHPK? #16

Closed haussli closed 3 years ago

haussli commented 3 years ago

is ssh-subsystem relevant if authen_method is not TAC_PLUS_AUTHEN_METH_SSHPK, perhaps _LOCAL, for author/acct in S5.3?

haussli commented 3 years ago

Yes, I believe it is - how the authentication was satisfied seems irrelevant. Not sure what I was thinking here.