Juniper MEDIA FLOW MANAGER 2.0.2 - ADMINISTRATOR S GUIDE AND CLI, Руководство администратора

Страница: 148 / 156

CHAPTER 5 CLI Commands Media Flow Manager Administrator’s Guide
148 username Copyright © 2010, Juniper Networks, Inc.
full-name <name>
nopassword
password [ 0 <cleartext_password> | 7 <encrypted_password> |
<cleartext_password>]
Add or delete (with
no
) a user account. New users are created initially with
admin
privileges
and you must manually change those privileges, if desired. To enable a user account, just set
a password on it (or use the
nopassword
command to enable it with no password required for
login). Removing a user account does not terminate any current sessions that user has open;
it just prevents new sessions from being established. Notes:
•
capability <capability>
—Change the capabilities for this user account. Creates the
account if it doesn't exist. Use
no
to revert the specified user to the default capability,
which is
admin
privileges. There are three pre-defined capabilities:
•
admin
—Full privileges (default); in
Enable
mode all
EXEC
commands are available.
•
monitor
—Privileges for reading all data and performing all actions, but not for
changing any configuration.
•
unpriv
—Unprivileged.
•
ftpuser
—Privileged for FTP transactions only; FTP users auto-created with a
namespace
creation have this capability.
•
disable
—Disable means of logging in to this account. Note that disabling a user account
does not terminate any current sessions that user has open; it just prevents new sessions
from being established. Optionally, specify a
password
; this leaves the account as a
whole the same, but forbids login with a password; it is assumed that SSH key access is
used instead. To re-enable the account, the user must un-disable it, and put a password
on it. The
no username <userid> disable
command prints a message to this effect; it
only exists to avoid stumping users with an apparently irreversible command.
•
full-name
—Set or reset to empty string (with
no
) the full name (referred to in some
circles as the "gecos") on this account.
•
nopassword
—Allow login to this account without a password.
•
password
—Set the login password for this user. Enter * (asterisk) to disable login; enter
nothing (and confirm) to set no password for a user.
•
0 <cleartext_password>
—Allows the password to be specified in cleartext,
whereby the system encrypts it using the DES algorithm. This password shows in the
encrypted form with
show configuration
.
•
7 <encrypted_password>
—Allows the password to be provided in the same
encrypted form in which it is stored in the shadow password file (/etc/shadow). Useful
for
show configuration
, since the cleartext password cannot be recovered (in
cleartext) after it is set.
•
<cleartext_password>
—Enter a cleartext password; if none is specified, the user
is prompted for the password, with entries obscured, requiring the same string to be
entered twice for confirmation.
Tip!
Use
password 7 <encrypted_password>
when setting user passwords; in case you
ever need to re-apply a saved configuration, the encrypted user passwords are saved (not so
for cleartext passwords) and can be re-applied with the saved configuration.
show
usernames
users [history [username <username>]]
whoami