2.4.6.3 Deleting TACACS+ Configuration

The tacacsCliAuthentication.sh script provides cleanup command to remove TACACS+ configuration from the DSR system.

This is useful in case of any incorrect configuration or if TACACS+ authentication needs to be disabled on the DSR CLI.

Run the following command to remove all TACACS managed user accounts from the DSR servers as admusr on active NOAM server of the topology:

/usr/TKLC/appworks/bin/tacacsCliAuthentication.sh cleanup users

Note:

The above command only impacts the locally created TACACS user accounts. It does not have any impact on the user's account presence on the remote TACACS+ server.

Run the following command to remove TACACS+ server configuration.

This command will only clean-up the TACACS+ server configuration details from the DSR system. The TACACS managed user accounts already present on the system remain unchanged.

/usr/TKLC/appworks/bin/tacacsCliAuthentication.sh cleanup config

Run the following command to cleanup and remove all TACACS+ based configuration and user accounts:

/usr/TKLC/appworks/bin/tacacsCliAuthentication.sh cleanup all

Note:

The cleanup command does not support --hostnames flag.