
SCS commands 76
User Set command
The
User Set
command changes a user’s configuration in the user database. See “Managing user accounts” and
“Access rights and levels.”
You can delete a user’s password or key. However, each user must have a password or a key, so you cannot remove
both. Also, you cannot remove a user’s password or key if that action would result in no users having USER access
rights.
Access right:
None to change your own password; USER to change anything else
Access level:
None to change your own password; ADMIN or APPLIANCEADMIN to change anything else
Syntax:
user set <username> [password=<pwd>] [sshkey=<keyfile>] [ftpip=<ftpadd>]
[key=<sshkey>] [access=<access>] [group=<group>]
Table 5-43
User Set command parameters
Parameter Description
<username> User
name
PASSWORD=<pwd>
New 3 to 16 alphanumeric character password. Passwords are case-sensitive. This parameter
is required when changing another user’s password.
The password is displayed on the screen. For security, clear your screen display after issuing
this command.
To delete a password, specify
Password =“”.
SSHKEY=<keyfile>
Name of uuencoded public key file on an FTP server. The maximum file size that can be
received is 4 KB.
FTPIP=<ftpadd>
FTP server IP address.
KEY=<sshkey>
Uuencoded SSH key. To delete an SSH key (whether it was originally specified with the
SSHKey
and
FTPIP
parameters or with the
Key
parameter), specify
Key=“”.
ACCESS=<access>
Command and port access rights or level. You can specify multiple access rights, separated by
commas, or a level. If specifying access rights, you can use one of three forms:
ACCESS=<access> to specify all access rights
<access> to specify only access rights to be added
ACCESS=–<access> to specify only access rights to be deleted
Valid values for access rights are:
P<n>—Access to the specified port number
P<x-y>—Access to the specified range of ports
PALL—Access to all ports
USER—User configuration access rights
PCON—Port configuration access rights
SCON—Configuration access rights
SMON—Monitor access rights
BREAK—Can issue
Port Break
command
Valid values for access levels are:
ADMIN—PALL, USER, SMON, PCON, and BREAK access rights.
APPLIANCEADMIN—PALL, USER, SCON, SMON, PCON, and BREAK access rights
Default = PALL, SMON
GROUP=<group>
Port group name. You can use one of three forms:
GROUP=<group> to specify all the port groups to which this user will belong
GROUP=+<group> to specify only port groups to be added
GROUP=–<group> to specify only port groups to be deleted
Examples
The following command sets the access rights for JohnDoe, enabling access to all ports with configuration and
monitoring access rights.
> user set JohnDoe access=pall,scon,smon
The following command removes the server configuration access right for JohnDoe and leaves other access rights
intact.
> user set JohnDoe access=-SCON