TACACS CGI                                                                      
Martha McConaghy  <urmm@vm.marist.edu>                                          
Marist College                                                                  
http://www.marist.edu/                                                          
                                                                                
                                                                                
One of the ways we secure different parts of our intra-web network is by        
using cgis/exits which verify the userid and password via our TACACS server.    
Our server runs on VM.  However, the protocol should be compatible to           
any daemon using the TACACS protocol.  The main parts of this are two           
Pipes filters which format the packets for TACACS (FORTAC) and UDP (FORUDP).    
They can be used by either CGI's or by REXX execs to do the call to TACACS.     
I have also included some samples of how we use these.  EWXTACR, EWXTACS        
and EWXTACF are exits we use with EnterpriseWeb.  They could be                 
easily adapted for other web servers as well.                                   
                                                                                
Please note, levels of CMS Pipelines prior to CMS 14 contained a                
bug which affected the UDP filter.  In order for these routines                 
to work properly, you should be at CMS 14 level, or run the runtime             
library version of Pipelines available from Princeton University.               
                                                                                
Questions or comments should be directed to:                                    
                                                                                
Martha McConaghy (urmm@vm.marist.edu)                                           
Marist College                                                                  
6/18/98