Performing user management using CLISH

The following administrator role is included with Access Appliance:

Primary

You can add additional users with these roles. To add the different administrator roles, you must have primary privilege.

Note:

When adding a new user, you must assign a password.

To add a user with specific privileges

Enter the following to add a user with specific privileges:
```
Admin> user add username role
```
where role is the role that you want to assign to the user.

Note:

The AD username cannot contain space.

To delete a user

Enter the following to delete a specified user from the current system.
```
Admin> user delete username
```

To change a user's password

Enter the following command to change the password for the current user:
```
Admin> passwd
```
You are prompted to enter the old password first. If the password matches, then you are prompted to enter the new password for the current user.
Note:
A user is not required to have primary privileges to change the password. Users with vxdefault or with no assigned role can also log in to CLISH and change their own password by using Admin> passwd command.
Enter the following command to change the password for a user other than the current user:
```
Admin> passwd [username]
```
You are prompted to enter the old password first. If the password matches, then you are prompted to enter the new password for the user.
To change the default password of the sysadmin user (IPMI user account), enter the following command:
```
Admin> ipmi passwd username old_password new_password
```
where username is sysadmin

To display a list of current users

Enter the following to display the current user:
```
Admin> show [username]
```
Enter the following to display a list of all the current users:
```
Admin> show
```
Enter the following to display the details of the administrator with the user name primary:
```
Admin> show primary
```

To add primary role to a local or domain user

Enter the following to add a user role to Access Appliance:
```
Admin> user modify role add username role domain
```
where domain can be local, ad or ldap.
- Domain is an optional argument with the default value as local.
- For local user, only the username is required.
- You can assign only a primary role to LDAP and AD users.
- For AD, enter domain\\username.
- For LDAP, enter username.

To delete a primary role from a local or domain user

Enter the following to delete the primary role from a user account:
```
Admin> user modify role delete username	role	domain
```

To add a role to a domain group

Enter the following to add a role to a specific domain group:
```
Admin> group modify role add groupname role domain
```
where domain can be ad or ldap.

Note:

The AD group name cannot contain a space.

For AD, enter domain\\groupname.
For LDAP, enter groupname.

To remove a role from a domain group

Enter the following to delete the specified role from a specific domain group:
```
Admin> group modify role delete groupname role	domain
```
where domain can be ad or ldap.

Note:

If the domain user is AD or LDAP, then you must configure NSS for that user using the Network nsswitch conf command. For an LDAP user, the NSS lookup should be set to ldap and for an AD user, the NSS lookup should be set to winbind. For more information, See Configuring NSS lookup order.

Performing user management using CLISH

Feedback

Feedback