Avocent ACS 6000 manual Configuring sudo, To delete a member from the wheel group, Sudo command

Page 68

60Cyclades™ ACS 6000 Advanced Console Server Command Reference Guide

# groups <username>

To delete a member from the wheel group:

1.Edit the file /etc/group.

2.Remove the username from the line with wheel::XX:<user1>,<user2>,<user3>.

Sudo command

Using the sudo (superuser do) command, a user can execute a command using the privileges of another user (often root), as specified in the /etc/sudoers file. The user is authenticated using his own password, not the root password. The /etc/sudoers file logs all commands and arguments.

Syntax:

sudo <command>

Configuring sudo

A system administrator configures the /etc/sudoers file to give groups or users access to some or all commands not authorized with their normal account. An administrator should log into the console server as a root user and edit the /etc/sudoers file by using the /usr/sbin/visudo command to configure sudo.

The sudoers file is composed of aliases and user specifications. When multiple entries match for a user, they are applied in order. Where there are conflicting values, the last match is used.

Since the sudoers file is parsed in a single pass, order is important. You should structure sudoers so that the Host_Alias, User_Alias, and Cmnd_Alias specifications come first, followed by any Default_Entry lines, and finally the Runas_Alias and user specifications.

An example of an /etc/sudoers file:

#User alias specification

User_Alias FULLTIMERS = millert, mikef, dowdy

User_Alias PARTTIMERS = bostley, jwfox, crawl

#Cmnd alias specification Cmnd_Alias KILL = /bin/kill Cmnd_Alias SHUTDOWN = /sbin/shutdown Cmnd_Alias REBOOT = /sbin/reboot Cmnd_Alias SU = /bin su

FULLTIMERS ALL = KILL, SHUTDOWN, REBOOT, SU

PARTTIMERS ALL = SHUTDOWN, REBOOT

Image 68
Contents Cyclades ACS Canadian DOC Notice Safety and EMC Approvals and MarkingsFCC Warning Statement Cyclades ACS Symbols Used TA B LE of C on TE N TS Port Access and Configuration Examples Table of Contents Page Introduction, Navigation Commands Access Options and How to Log Into the CLI CLI utility can be accessed in the following waysConfiguration Tasks Performed With the CLI To start the CLICLI Navigation Cli- cdTabTabPrompt like the following appears at each level Introduction, Navigation and CommandsAutocompletion Command Line Syntax ParametersSyntax used Page Commands Used for the CLI HelpAdd DeleteSniff PwdConnect Share DisconnectExit/quit FtpScp SetCommit RevertListconfiguration ShowGo to the access level To power control on, off, cycle outlets of one specific PDUGo to the PDU level under access Cycle, on, off, lock and unlockGo to the outlet level for the specific PDU PasswdOpiepasswd Special Multi-session Commands WizListsharedsession KillsharedsessionCleandbuf and cleanappliancedatabuf Showdatabuf and showappliancedatabufCLI Equivalent Actions to Web Manager Checkbox Selection Page Port Access and Configuration Examples Port Access and Configuration TasksFor Serial Port Access Parameters Field Description For ApplianceFor Power Port Access and Configuration Examples Field For OutletsTo connect to a device console connected to a serial port Accessing Serial Ports using tsmenuConnect to a Device Console Connected to a Serial Port Manage Power for a Device Connected to an Outlet on a PDU Port Configuration ExamplesTsmenu options To close the target sessionTo set up a console access service CAS port Log onto the CLI as an administratorEnter show to view the status of port To enable a power management portPage Type ls to see available sub-nodes Enter ls to view the available options SystemEnter cd system to navigate to the System level System/Security Options System Navigation Tree System/SecurityEnter cd security to navigate to the security level Date and Time Options Date and Time Navigation Tree CLI Overview for AdministratorsSystem/Date and Time To set the login banner System/Help and LanguageSystem/General To set the online help URLSystem/Boot Configuration Enter show to view the system informationSystem/Information System/UsageNetwork/Settings Enter show to view the list of available optionsNetwork Enter cd network to navigate to the Network levelTo configure a IPv4 or IPv6 static IP address Network/IPv4 and IPv6Network/Devices Network/IPv4 and IPv6 Options IPv4 and IPv6 Navigation TreeEnter show to view the changes Network/HostsTo add a host to the host table Network/Devices Options Devices Navigation TreeHosts cli-cd 172.26.31.164/settings Type add then press ReturnNetwork/Firewall Network/IPSecVPNEnter cd network/firewall to navigate to the firewall level Enter cd network/ipsecvpn to navigate to the ipsecvpn levelWiz command Network/SNMPEnter cd network/snmp to navigate to the snmp level 11 Network/IPSecVPN Options IPSecVPN Navigation Tree13 Ports Options Ports Navigation Tree PortsEnter cd ports to navigate to the Ports level CLI Overview for Administrators 14 Serial Port Commands CommandSummary Appliance with an internal modem To copy the configuration from serial port 5 to ports 10Auxiliary ports Pluggable Devices Appliance without an internal modemAuthentication 16 Authentication Options Authentication Navigation TreeUsers Enter cd users to navigate to the users levelTo add a user and password Enter show to verify that the new user has been addedSyslog Enter save19 EventsandLogs Options EventsandLogs Navigation Tree EventsandLogs18 Syslog Options Syslog Navigation Tree Power Management Power Management Options are described in the table below20 Power Management Options Descriptions Option Description To rename a PDUCLI Overview for Administrators Enter set newpduid=newPDUID To manage power for a selected outletActive Sessions Information To view and kill ActiveSessionsPage Connect to the console of the console server as root Enter shell. a warning appears followed by the root promptPage Access rights Table B.1 Access Rights Groups Members PermissionsAppendix B Migration CLI AppendicesTable B.2 Commands Not Supported by the Migration CLI AdministrationConfig administration bootconf Config administration notificationsCommand Value or Descriptions Config network hostSettingsConfig physicalports access Config physicalports databufferingConfig physicalports power management Config security profile customConfig security loadkey Url Username Page Appendix C Su and Sudo Commands Su commandRun the groups command to verify Table C.1 Su Command Options OptionDescriptionTo delete a member from the wheel group Configuring sudoSudo command Page Page To resolve an issue Appendix D Technical SupportPage For Technical Support
Related manuals
Manual 70 pages 12.94 Kb

ACS 6000 specifications

The Avocent ACS 6000 is a leading edge solution designed for remote access and management of critical IT infrastructure. This compact and robust device serves as a key tool for IT administrators, allowing them to manage serial console access for servers, networking equipment, and other serially controlled devices. Ideal for both enterprise environments and smaller settings, the ACS 6000 enhances operational efficiency and reliability.

One of the standout features of the Avocent ACS 6000 is its ability to provide secure remote access. The device supports various security protocols, including SSH, SSL, and IP filtering, ensuring that access to the managed devices is protected against unauthorized entry. With strong encryption standards, it provides peace of mind for organizations handling sensitive data.

The ACS 6000 is equipped with advanced management capabilities, enabling administrators to monitor and control serial communications across multiple devices from a single interface. This centralized management not only reduces the complexity associated with handling numerous individual devices, but it also streamlines troubleshooting and system diagnostics, resulting in quicker response times and less downtime.

Another notable characteristic of the ACS 6000 is its scalability. The modular design allows for easy expansion as organizational needs evolve. IT managers can begin with a basic configuration and upgrade seamlessly by adding more ports or features as necessary. This flexibility makes the ACS 6000 an ideal solution for growing organizations.

User-friendly features such as an intuitive web interface simplify the setup and configuration process. Through this interface, users can easily navigate and utilize various functions, including alert settings, logging, and reporting features that provide valuable insights into device performance and usage patterns.

In addition to its robust functionality, the ACS 6000 is designed with reliability in mind. Built to endure varied environmental conditions, it operates reliably in data centers and remote locations alike. The device can also handle high-voltage operations, making it versatile for various industrial applications.

In summary, the Avocent ACS 6000 stands out as an essential tool for modern IT management, delivering secure, scalable, and user-friendly solutions for remote access to serial controlled devices. With its advanced features and robust design, it effectively meets the challenges of IT infrastructure management in today's fast-paced digital landscape.