TACACS+ Accounting Packet Processing

This article gives an explanation of how ClearBox Server processes TACACS+ accounting request packets. Read more about accounting concepts and TACACS+ concepts.

Before packet is processed, realm stripping and forwarding is performed.

Server calls ITACACSAccounting::ProcessAccounting for accounting processing, passing all AV pairs found in the packet to server extension. If it returns A_DISCONNECT in response to this method call, server tries to invoke INASManagement::DisconnectUser on a synchronizer object associated with a NAS from which accounting packet is received. Note, that A_DISCONNECT return value is valid only for accounting packets with 'Update' flag set.