30.11.2017 - Authentication is handled via PAM, and includes login , ssh , sudo , and su . At this point, the Cumulus Linux switch should be able to query the TACACS server. .. TACACS+ authentication service (pap, chap, or login). . (commands are permitted or denied based on the standard Linux user permissions .