76 DOMINION SX I NSTALLATION AND O PERATIONS MANUALTACACS+ Server Configuration• The Dominion SX requires a new service to be added and two argument-value pairs to be returned bythe server. The new service is called dominionsx. The valid authorization parameters are port-list anduser-type.• port-list: Specifies the ports that the user has access to. Currently, the only valid value is a space-separated list of port numbers. Multiple port-list parameters are allowed. All port-list values will becombined.• user-type: A string representing the type of Dominion SX user. Currently: Administrator, Operator, andObserver.For Dominion SX, both per port Authentication and Authorization are possible with TACACS+Cisco Freeware Daemon:This daemon is freely available from Cisco at:http://cisco.com/en/US/tech/tk583/tk642/technologies_tech_note09186a00800946a3.shtmlMany other TACACS+ implementations are also based on this daemon.No special steps are required to add the new service or parameters. Simply place them in the user databasefor each user that will be accessing a Dominion SX system. Below is an example of user and group usage:group = anyone{service = dominionsx {port-list = "1 2 3 4 5"user-type = observer}}user = tanaka{login = cleartext "password"member = anyone}user = proctor{login = cleartext "password"service = dominionsx {port-list = "1 2 3 4 5 15"user-type = administrator}}
