Feature Request - Load Credentials From Secure Sources

[tcuthbert]

Typical enterprise environments may keep credentials in a local KeePass datafile. I'd like the option to load creds from external sources such as KeePass or Vault.

[coxley]

👍

I'm very for this as most places I've worked a local file wouldn't be good enough. I propose an authentication driver/loader. We can provide an Authentication abc driver where a user can overload it if they want and provide it via config just like netdevice loaders.

.get_credentials or something should be enforced with abc.abstractmethod to return a dict/tuple. The default driver could be an overloaded class Tacacsrc which does the current behavior.

[jathanism]

We experimented a little w/ revamping Tacacsrc to use keyring. To @coxley's point, providing a plugin that is compatible w/ keyring and keyring backends would be a winner here.

See an example here: https://gist.github.com/jathanism/287ae6705d206039efdc5b1bd324f368