Brocade Network OS NETCONF Operations Guide v4.1.1 User Manual

Page 223

Advertising
background image

Network OS NETCONF Operations Guide

191

53-1003231-02

Password policies

15

</config>

</edit-config>

</rpc>

<rpc-reply message-id="817" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<ok/>

</rpc-reply>

3. To verify the enforcement of password encryption, issue the <edit-config> RPC with a subtree

filter to return information under the <service> node in the
urn:brocade.com:mgmt:brocade-aaa namespace.

<?xml version="1.0" encoding="UTF-8"?>

<rpc message-id="818" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<get-config>

<source>

<running/>

</source>

<filter type="subtree">

<service xmlns="urn:brocade.com:mgmt:brocade-aaa">

</filter>

</get-config>

</rpc>

<rpc-reply message-id="818" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<service xmlns="urn:brocade.com:mgmt:brocade-aaa">

<password-encryption/>

</service>

</rpc-reply>

4. Issue the <edit-config> RPC to create the user account with a password.

In this case, the <encryption-level> element specifies to save the password as clear text
(encryption-level = 0).

<?xml version="1.0" encoding="UTF-8"?>

<rpc message-id="819" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<edit-config>

<target>

<running/>

</target>

<config>

<username xmlns="urn:brocade.com:mgmt:brocade-aaa">

<name>testuser</name>

<role>testrole</role>

<desc>Test User</desc>

<encryption-level>0</encryption-level>

<user-password>Test User</user-password>

</username>

</config>

</edit-config>

</rpc>

<rpc-reply message-id="819" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<ok/>

</rpc-reply>

5. To verify the form in which the password is stored, issue the <get-config> RPC with a subtree

filter to retrieve the information under the <username> node in the
urn:brocade.com:mgmt:brocade-aaa namespace.

Advertising