title: tacacs+ for Linux authentication/authorization using pam_tacplus
body: <p>I am using TACACS+ to authenticate Linux users using pam_tacplus.so PAM module and it works without issues.</p>
  
  <p>I have modified the pam_tacplus module to meet some of my custom requirements.</p>
  
  <p>I know by default, TACACS+ does not have any means to support linux groups or access level control over linux bash commands, however, I was wondering is there any way that some information could be passed from TACACS+ server side to let the pam_tacplus.so module which can be used to allow/deny , or modify the user group on the fly [from pam module itself].</p>
  
  <p>Example: If I could pass the priv-lvl number from server to the client and which could be used for some decision making at the PAM module.</p>
  
  <p>PS: I would prefer a method which involved no modification at the server side [code], all modification should be done at Linux side ie pam_tacplus module.</p>
  
  <p>Thanks for any help.</p>