HP NonStop SSH 544701-014, Справочное руководство

Страница: 69 / 344

HP NonStop SSH Reference Manual Configuring and Running SSH2
•
69
Considerations
•
Maintaining statistics may slow down the SSH2 process.
FULLSSHCOMACCESSGROUP<j>
This parameter set allows granting administrative SSHCOM command privileges to groups rather than just than
super.super. Admin groups are defined via the parameter set FULLSSHCOMACCESSGROUP<j> where <j> is a
number between 1 and 99.
Parameter Syntax
FULLSSHCOMACCESSGROUP<j> <group>
Arguments
<group>
A Guardian group name. All members of the group will have full SSHCOM access.
Default
By default, none of the parameters are set, i.e. only users configured in the Safeguard OBJECTTYPE USER record (if
such exists) and super.super (unless explicitly denied in OBJECTTYPE USER) can access privileged commands.
Example
FULLSSHCOMACCESSGROUP1 admin
FULLSSHCOMACCESSGROUP2 super
Considerations
•
Some of the privileged commands in SSHCOM are critical to the security of the system. Therefore granting
access to other user accounts than super.super must be carefully considered.
•
The parameters must be set contiguously, i.e. if one parameter FULLSSHCOMACCESSGROUP<k> is not
defined the checking of FULLSSHCOMACCESSGROUP<i> parameters stops.
•
This parameter set is disabled if a thawed OBJECTTYPE USER record exists in Safeguard, i.e. any
FULLSSHCOMACCESSGROUP<j> parameter configuration is ignored in this case.
See also:
•
FULLSSHCOMACCESSUSER<i>
•
See table in “ SSHCOM Access Summary ” in section "SSHCOM Command Reference".
FULLSSHCOMACCESSUSER<i>
This parameter set allows granting administrative SSHCOM command privileges to users other than super.super. Admin
users are defined via the parameter set FULLSSHCOMACCESSUSER<i> where <i> is a number between 1 and 99.
Parameter Syntax
FULLSSHCOMACCESSUSER<i> <group>.<user>
Arguments
<group>.<user>
The Guardian logon name of the account that will have full SSHCOM access. Logon ids and alias names are not
supported.
Default