Bay Networks 6300, Supplement Manual

Page: 286 / 593

Remote Annex 6300 Supplement to the Remote Annex Administrator’s Guide for UNIX
Chapter 15 Using RA 6300 Security
A-258
Book A
deny
For a single user or for conditions that meet profile criteria, you can deny
access to the RA 6300 in the acp_userinfo file. If the profile criteria are
met or the user name in the user entry matches the userid supplied at
login, ACP refuses access to the RA 6300.
Table A-28 describes the entry
for deny in the acp_userinfo file. The syntax is:
deny
Table A-28. Entry for deny in the acp_userinfo File
The following is an example of using deny in the acp_userinfo file:
user username=liza
deny
end
user group=eng;time=”9:00am -10:30pm Saturday-Sunday”
clicmd ppp end
end
In this example, even if user liza is a member of the eng group, she is
denied access, since erpcd finds the match with the userid first.
In the following example, no user is permitted to connect to any RA 6300
between 11:00 PM and 12:00 PM on any of the specified days:
user time=”11:00pm – 12:00pm Saturday-Wednesday”
deny
end
Entry Description
deny A keyword indicating the user will be denied access to the
RA 6300. If used, deny should be the only entry in the user...end
block. A message is logged in the ACP log file indicating why
access is being denied. For CLI users, a message is displayed.