User accounts and local authentication, User accounts and local, Authentication – HP VMA-series Memory Arrays User Manual

Page 128

Advertising
background image

128

AM456-9007B Rev 02

HP VMA SAN Gateway Installation and User Guide

User Accounts and Local Authentication

Note:

There are two defined system accounts: one with full privileges (admin), and

one with privileges for reading all data and performing all actions, but not for
changing any configuration (monitor).

[no] username <userid>

Create or remove a user account. New users are created initially with

admin

privileges and disabled. To enable a user account, just set a password on it (or use

the

nopassword

command to enable it with no password required for login).

Removing a user account does not terminate any current sessions that user has

open; it just prevents new sessions from being established.

username <userid> capability <capability>
no username <userid> capability

Change the capabilities for this user account. Creates the account if it doesn’t exist.

The system provides three predefined capabilities: admin, monitor, and unpriv. It

is possible to statically expand this set.

The

no

modifier reverts the specified user to the default capability, which is admin

privileges.

username <userid> password <cleartext password>
username <userid> password 0 <cleartext password>
username <userid> password 7 <encrypted password>
username <userid> nopassword
[no] username <userid> disable
[no] username <userid> disable password

Control what it takes for the specified user to log in. The first three commands set

a password on the account.

The 0 flavor allows the password to be specified in cleartext.

Note:

The maximum password length is 8 characters. The CLI will allow you to

enter a password greater than 8 characters, but you will not be able to successfully
login. Attempting to set a password of greater than 8 characters in the web interface
will cause multiple errors.

The 7 flavor allows the password to be provided in the same encrypted form
in which it would be stored in the password file. This is useful for the

show

configuration

command, since the cleartext password cannot be

Advertising
This manual is related to the following products: