Cyclades AlterPath ACS, Command Reference Manual

Page: 74 / 420

58
Authentication
•
adduser - To add an user you need to pass the following parameters: user name
<username> ; administrator privileges or not <admin - yes|no> ; biouser or not
<biouser - yes|no> ; password <password> ; comments <comments>. Example:
security>adduser username john admin no biouser no password john1234
•
addgroup - To add a group it is necessary to inform the group name <groupname>
and the members <usernames> of this group. Example:
security>addgroup groupname test usernames john,mary
•
delgroup - To delete a group it is necessary to inform the name of the group
<groupname> you want to delete. Example:
security>delgroup groupname test
•
deluser - To delete an existing user, it is necessary to inform the user you want to
delete by specifying the
<username> parameter. Example:
security>deluser username cyclades
•
loadkey - This options allows you to get the user’s public key via scp. The user
must be enrolled in the local database of the unit. You must specify the user name
<username> and the url <url> . The url must follow this syntax:
user@host:pathname . Example:
security>loadkey username root url root@192.168.0.1/home/key
•
passwd - Change the password of a user. You need to inform the user <username>
and the new password <newpassword> of the user. Example:
security>passwd username root newpassword diffucultpasswd1234
To configure authentication type for device console access.
Step 1 - Open the CLI interface by issuing the command:
# CLI
Step 2 - Navigate to the following path.
cli>config security authentication authtype <string>
Step 3 - To see the list of authentication types, from >authtype
<Press tab to see list of possible values>
The following list of authentication types appears.
Nis, kerberos, local/Nis, Nis/local, kerberos/local,
local/TacacsPlus, NisDownLocal, kerberosDownLocal,
local/radius, RadiusDownLocal, ldap, none, TacacsPlus,