Authorization Pass
The Oracle® Enterprise Session Border Controller initiates the authorization with an authorization REQUEST packet.
+-----------------------------------+ | Common Header | | | | type contains 0x2 | +--------+--------+--------+--------+ |authen_ |priv_lvl|authen_ |authen_ | |method | |type |service | | 0x05 | 0x00 | 0x01 | 0x01 | |--------+--------+--------+--------+ |user_len|port_len|rem_addr|arg_cnt | | | |_len | | | N | N | N | 2 | +--------+--------+--------+--------+ |arg1_len|arg2_len| user ... | | | | | | N | N | login name | +--------+--------+-----------------+ | port | | tty10 | +-----------------------------------+ | rem_addr | | localhost address | +-----------------------------------+ | arg1 | | AVP | | service=shell | +-----------------------------------+ | arg2 | | AVP | | cmd=configure terminal security | +-----------------------------------+
- The authen_method field specifies the method used to authenticate the subject — 0x05 for TAC_PLUS_AUTHEN_METHOD_LOCAL (authentication by the client).
- The priv_lvl field specifies the privilege level requested by the user — 0x00 for TAC_PLUS_PRIV_LVL_MIN.
- The authen_type field specifies the authentication methodology — 0x01 for TAC_PLUS_AUTHEN_TYPE_ASCII (simple login).
- The authen_ service field specifies the requesting service — 0x01 for TAC_PLUS_AUTHEN_SVC_LOGIN (login service).
- The user_len field contains the length, in octets, of the user field.
- The port_len field contains the length, in octets, of the port field.
- The rem_addr_len field contains the length, in octets, of the rem_addr field.
- The arg_cnt field contains the number of arguments in the message body.
- The arg1_len field contains the length, in octets, of the service AVP.
- The arg2_len field contains the length, in octets, of the service AVP.
- The user field contains the login name of an admin user.
- The port field contains the name of the Oracle® Enterprise Session Border Controller port on which authentication is taking place. Following Cisco Systems convention, this field contains the string tty10 .
- The rem_addr field specifies the location of the user to be authenticated. This field contains the localhost address.
- The arg1 field contains the mandatory service AVP.
- The arg2 field contains the mandatory cmd AVP.
The TACACS+ daemon returns a authorization RESPONSE reporting the status, and terminating the authorization session.
+-----------------------------------+ | Common Header | | | | type contains 0x2 | +--------+--------+-----------------+ | status |arg_cnt | server_msg_len | | 0x01 | 0 | 0 | |--------+--------+-----------------+ | data_len | | 0 | +-----------------+
- The status field specifies the authorization status — 0x01 for TAC_PLUS_AUTHOR_STATUS_PASS_ADD (authorization approved).
- The arg_cnt field contains a value of 0 — the authorization RESPONSE returns no arguments.
- The server_msg_len and data_len fields both contain a value of 0, as required by the TACACS+ protocol.