# TACACS+ integration

**URL:** <https://dmap-community.ductus.global/t/tacacs-integration/316>\
**Category:** Other Northbound Interfaces\
**Created:** [December 14, 2015, 6:04pm UTC](https://dmap-community.ductus.global/t/tacacs-integration/316 "2015-12-14T18:04:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![slomikee](https://avatars.discourse-cdn.com/v4/letter/s/898d66/32.png) [@slomikee](https://dmap-community.ductus.global/u/slomikee)\
**Post date:** [December 14, 2015, 6:04pm UTC](https://dmap-community.ductus.global/t/tacacs-integration/316/1 "2015-12-14T18:04:56Z")

</div>

Has anyone successfully integrated TACACS+ with CONFD? If so what was the earliest version you were are to get it working with?

Thanks,

mike

---

<div class="post-metadata">

**Author:** ![greg](https://avatars.discourse-cdn.com/v4/letter/g/71c47a/32.png) [@greg](https://dmap-community.ductus.global/u/greg)\
**Post date:** [December 15, 2015, 6:46pm UTC](https://dmap-community.ductus.global/t/tacacs-integration/316/2 "2015-12-15T18:46:45Z")

</div>

If you want to integrate with TACACS+, there are two options with ConfD. One is to use a PAM module for TACACS+, and to enable integration of PAM with ConfD for authentication (see section 14.4.3 of the ConfD User’s Guide). Whatever version(s) of TACACS+ is supported by the PAM module is what will be supported by ConfD.  
The other option you have is to use the external authentication API described in section 14.4.4 of the ConfD User’s Guide. Here you have to write a client application, and again, if you use some TACACS+ libraries to write the client, whatever version of TACACS+ is supported by the library is what can be used.  
ConfD doesn’t have any direct integration with TACACS+, only indirectly through PAM or an external authentication client, so the version supported is whatever the PAM module or TACACS+ library supports.

---

<div class="post-metadata">

**Author:** ![bkannadassan](https://avatars.discourse-cdn.com/v4/letter/b/f6c823/32.png) [@bkannadassan](https://dmap-community.ductus.global/u/bkannadassan)\
**Post date:** [December 27, 2019, 6:17am UTC](https://dmap-community.ductus.global/t/tacacs-integration/316/3 "2019-12-27T06:17:46Z")

</div>

I know this is a very old article. I would like to know is there any provision for a user to change his password remotely ?.
