user = javier { service = exec { priv-lvl = 15 } }

user = DEFAULT {
    service = exec {
        default attribute = permit
	priv-lvl = 1
    }
}


default authentication = db mysql://jffnms:jffnms@localhost/jffnms/auth?usern&passwd
accounting file = /var/log/tac_acc.log
db_accounting = "mysql://jffnms:jffnms@localhost/jffnms/acct"

host = 22.21.23.4 {
        key = secret 
        type = cisco
	prompt = "
Welcome to JFFNMS Router

Username: "
}


#default authentication = file /etc/passwd
# Now tacacs+ also use default PAM authentication
#default authentication = pam pap
#If you like to use DB authentication
#default authentication = db "db_type://db_user:db_pass@db_hostname/db_name/db_table?name_field&pass_field
# db_accounting = "db_type://db_user:db_pass@db_hostname/db_name/db_table"



#user = DEFAULT {
#    default service = permit
#    service = ppp protocol = ip {}
#}

# Yes we have more features like per host key 

#host = 127.0.0.1 {
#        key = test 
#        type = cisco
#	 enable = <des|cleartext> enablepass
#	 prompt = "Welcome XXX ISP Access Router \n\nUsername:"
#}

#user = test {
#    name = Test User 
#    pap = cleartext test
#    member = staff
#}
#
#group = staff {
#    time = "Wd1800-1817|!Wd1819-2000"
#}

