The administrator can list all terminal identities defined in the terminal authority data base using the
VFY:TAUTH
input message:
VFY:TAUTH
If command logging with open terminal restrictions is desired, there is a way to achieve this without adding a
terminal identity and assigning all command groups to it.
If the terminal identity is
not
added to the terminal authority data base, then the device has no restrictions when
authority checking is enabled for the device. Restrictions are defaulted to none if a terminal identity is not found in
the terminal authority data base. However, command logging and reporting are still performed.
3.8.4.4 Defining a Command Group Profile
To simplify assignment of command groups to users and terminals, the administrator may wish to define one or
more command group
profiles
. These profiles are simply lists of command groups, and can be assigned to users
and terminals similar to the way command groups are assigned.
Command profile identities are created using
ADD:PROFL
. For example, the following input message defines an
SM/SM-2000 maintenance profile identity:
ADD:PROFL:IDENT="smmaint"
Command groups can be added to or deleted from a profile using
CHG:PROFL
. For example, assume the following
command groups are needed by anyone performing SM/SM-2000 maintenance:
ALARM
Alarm management
MAINT
Routine system maintenance activities
ODD
Office Dependent Data activities
SM/SM-2000
Switching module/switching module-2000 maintenance activities
They can be added to the "smmaint" profile with the following input message:
CHG:PROFL:IDENT="smmaint",ACTION=INCLUDE,COMGR=ALARM,MAINT,ODD,SM
A profile identity is deleted from the profile authority data base via the
DEL:PROFL
input message. For example,
DEL:PROFL:IDENT="smmaint"
The administrator can retrieve information about profile identities from the profile authority data base using the
VFY:PROFL
input message. The following lists all profile identities in the profile authority data base:
VFY:PROFL
The following lists the command groups assigned to a given profile identity (that is, "smmaint"):
VFY:PROFL:IDENT="smmaint"
3.8.4.5 Assigning Command Groups and Profiles
NOTE:
Activities described in this section should be completed
immediately
after a terminal or user identity is
created via
ADD:PAUTH
or
ADD:TAUTH
. Otherwise the terminal or user will be completely restricted.
Command groups and profiles are assigned to user identities using
ADD:PCGRP
. Command groups and profiles
are assigned to terminal identities using
ADD:TCGRP
. For example, command group PASS (Personal password
modification) is assigned to user identity "userid" and terminal identity "ttyn" by the following input commands:
ADD:PCGRP:IDENT="userid",COMGR=PASS
ADD:TCGRP:TERM="ttyn",COMGR=PASS
Similarly, these identities are assigned command group profile "smmaint" by entering:
ADD:PCGRP:IDENT="userid",PROFL="smmaint"
235-105-210
October 1999
Copyright © 1999
Page 29
Summary of Contents for 5ESS-2000
Page 96: ...235 105 210 October 1999 Copyright 1999 Page 2 ...
Page 184: ...235 105 210 October 1999 Copyright 1999 Page 3 ...
Page 300: ...13 STOP YOU HAVE COMPLETED THIS PROCEDURE 235 105 210 October 1999 Copyright 1999 Page 55 ...
Page 339: ...7 STOP YOU HAVE COMPLETED THIS PROCEDURE 235 105 210 October 1999 Copyright 1999 Page 13 ...
Page 342: ...235 105 210 October 1999 Copyright 1999 Page 2 ...
Page 359: ...235 105 210 October 1999 Copyright 1999 Page 5 ...
Page 609: ...2 STOP YOU HAVE COMPLETED THIS PROCEDURE 235 105 210 October 1999 Copyright 1999 Page 12 ...
Page 676: ...235 105 210 October 1999 Copyright 1999 Page 9 ...
Page 792: ...3 STOP YOU HAVE COMPLETED THIS PROCEDURE 235 105 210 October 1999 Copyright 1999 Page 9 ...
Page 799: ...Figure 11 36 3 1 Cleaning Points 235 105 210 October 1999 Copyright 1999 Page 7 ...
Page 801: ...235 105 210 October 1999 Copyright 1999 Page 9 ...
Page 839: ...2 STOP YOU HAVE COMPLETED THIS PROCEDURE 235 105 210 October 1999 Copyright 1999 Page 16 ...
Page 999: ...2 STOP YOU HAVE COMPLETED THIS PROCEDURE 235 105 210 October 1999 Copyright 1999 Page 13 ...
Page 1008: ...Figure 11 55 1 CTSNS DIP Switch Settings 235 105 210 October 1999 Copyright 1999 Page 2 ...
Page 1011: ...235 105 210 October 1999 Copyright 1999 Page 5 ...
Page 1053: ...235 105 210 October 1999 Copyright 1999 Page 15 ...
Page 1289: ...Figure 15 17 2 AMATPS Data Link 235 105 210 October 1999 Copyright 1999 Page 2 ...
Page 1292: ...235 105 210 October 1999 Copyright 1999 Page 5 ...
Page 1303: ...9 STOP YOU HAVE COMPLETED THIS PROCEDURE 235 105 210 October 1999 Copyright 1999 Page 2 ...
Page 1360: ...Figure 15 47 2 Typical SCANS III Link Diagram 235 105 210 October 1999 Copyright 1999 Page 2 ...
Page 1372: ...235 105 210 October 1999 Copyright 1999 Page 2 ...
Page 1374: ...235 105 210 October 1999 Copyright 1999 Page 4 ...
Page 1421: ...Table 1 1 O M Checklist 235 105 210 October 1999 Copyright 1999 Page 3 ...