Authentication CONTINUE Packet

The Oracle® Enterprise Session Border Controller, acting as a TACACS+ client, sends an authentication CONTINUE packet to the TACACS+ daemon in response to a REPLY message which requested additional data required by the authenticator.

The authentication CONTINUE packet format is as follows.

+-----------------------------------+
|           Common Header           |
|                                   |
|         type contains 0x1         |
+--------+--------+-----------------+
|   user_msg_len  |     data_len    |
|--------+--------+-----------------+
|  flags |       user_msg ...       |
+--------+--------------------------+
|              data ...             |
+-----------------------------------+

user_msg_len

This 16-bit field contains the length of the user_msg field in octets.

data_len

This 16-bit field contains the length of the data field in octets. As the data field is not used in the current TACACS+ authentication implementation, the data field always contains a value of 0 as specified in Section 4 of the TACACS+ draft RFC.

flags

This 8-bit field contains various flags that are not under user control.

user_msg

This variable length field contains a string that responds to an information request contained in a REPLY message.

data

This optional variable length field contains miscellaneous data, often in response to a daemon request. The current TACACS+ authentication implementation does not use the data field in Authentication CONTINUE packets.