Do_auth 2.0
Apologies for not posting this earlier, here is the Python 3 version of do_auth. In addition, I have added optional netaddr support which, in plain English, means you can finally use slash notation - IF you install netaddr. (via ‘pip3 install netaddr’ or some other method) Hence, 192.168.1.0/25 is now a perfectly valid way to put in an ip range.
I have been using tac_plus with do_auth for many years now. I have never bothered to change because they “simply work.” It is fast, stable and allows very granular control. I hope you find it so too.