Page MenuHomeVyOS Platform

tacacs: nss_tacplus: buffer truncated due to size limitation
Open, Requires assessmentPublicBUG

Description

Minimal configuration to trigger this issue:

set system login tacacs server 192.168.1.50 key 'test123'
set system login tacacs timeout '1'
set system login user vyos authentication plaintext-password 'vyos'
set system login user vyos2 authentication plaintext-password 'vyos2'

After commit when monitoring the log via: monitor log one will see:

Dec 09 17:45:17 usermod[212049]: nss_tacplus: group frrvty members truncated due to short buffer 215 characters
Dec 09 17:45:17 usermod[212049]: nss_tacplus: group adm members truncated due to short buffer 218 characters
Dec 09 17:45:17 usermod[212049]: nss_tacplus: group dip members truncated due to short buffer 218 characters

Source: https://github.com/vyos/libnss-tacplus/blob/ec500119f689d53b966b77369de195f90f63c414/nss_tacplus.c#L1060

Details

Version
1.4-stable-202510222107
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)