2.4.6.3 Deleting TACACS+ Configuration

The tacacsCliAuthentication script provides cleanup command to remove TACACS+ configuration from the DSR system.

This is useful in case of any incorrect configuration or if TACACS+ authentication needs to be disabled on the DSR CLI.

Run the following command to remove all TACACS managed user accounts from the DSR servers as admusr on active NOAM server of the topology:

/usr/TKLC/appworks/bin/tacacsCliAuthentication cleanup users

Note:

The above command only impacts the locally created TACACS user accounts. It does not have any impact on the user's account presence on the remote TACACS+ server.

Run the following command to remove TACACS+ server configuration.

This command will only clean-up the TACACS+ server configuration details from the DSR system. The TACACS managed user accounts already present on the system remain unchanged.

/usr/TKLC/appworks/bin/tacacsCliAuthentication cleanup config -A all

Run the following command to cleanup and remove all TACACS+ based configuration and user accounts:

/usr/TKLC/appworks/bin/tacacsCliAuthentication cleanup all

SSH policy cleanup

Run the following command to remove only TACACS SSH or session policy artifacts:

/usr/TKLC/appworks/bin/tacacsCliAuthentication [--hostnames <hostname1>[,<hostname2>]] cleanup ssh-policy

Console policy cleanup

Run the following command to remove only TACACS console or session policy artifacts:

/usr/TKLC/appworks/bin/tacacsCliAuthentication [--hostnames <hostname1>[,<hostname2>]] cleanup console-policy

Run the following command to clean up all users, or remove selected user access methods:

/usr/TKLC/appworks/bin/tacacsCliAuthentication cleanup users [-A <access_method>]

Run the following command to cleanup only the selected PAM configuration:

/usr/TKLC/appworks/bin/tacacsCliAuthentication cleanup config -A <access_method|all>

Run the following command to cleanup -A, selected users, configuration, and policy:

/usr/TKLC/appworks/bin/tacacsCliAuthentication cleanup -A <access_method>

Run the following command to cleanup only TACACS SSH or console session policy configuration:

/usr/TKLC/appworks/bin/tacacsCliAuthentication cleanup <ssh-policy|console-policy>