Technical Tip: TACACS+ Attribute for VDOM

Description

This article describes TACACS+ Attribute for VDOM. This is useful when trying to send VDOM information for the 'vdom-override' option for the administrator accounts using TACACS+.

Scope

FortiADC and FortiADC VM.

Solution

For this article example, FortiAuthenticator is used as TACACS+ server.

Example of TACACS+ configuration with 'vdom-override' option enabled:
(For more information on this option, refer to the documentation at the end of this article.)

config system admin
    edit "vd1admin"
        set vdom vd1
        set auth-strategy tacacs_plus
        set tacacs-plus-server vd1tacacs
        set accprofile-override enable
        set vdom-override enable
        set wildcard enable
        set access-profile super_admin_prof

STEP 1: In FortiAuthenticator, go to Authentication -> TACACS+ Service -> Authorization

STEP 2: Then, select the Services tab and Create New services.

STEP 3: Add Attribute 'admin_vdom' and enter the 'vdom name' for the Value.

Related documents:

config system admin