HP TippingPoint Next Generation Firewall manual Pwd

Page 45

pwd

Collection of password-related attribs. The attribs are used to confirm the SuperUser password and enable the service mode used by support personnel. For information about managing users including user groups, passwords, and security levels, see the “Administration” chapter in the SMS User Guide.

Related Command users

Table 3-14 pwd Attributes

Attribute

Description

Type

Access

Range

 

 

 

 

 

pwd.group-adduser

Used to add a user to a user group.

String

write-only

 

 

 

 

 

 

pwd.group-deluser

Used to remove a user from a user group.

String

write-only

 

 

 

 

 

 

pwd.group-list

Used to list all groups, or groups with

String

read-only

 

 

users.

 

 

 

 

 

 

 

 

pwd.level

Attribute used to set the security level for

Int

read-write

 

 

the password.

 

 

 

 

 

 

 

 

pwd.service-enable

Used to enable/disable the service mode

Bool

read-write

0

 

password for the system.

 

 

 

 

To protect customer security, the service

 

 

 

 

mode is deactivated at the factory. To

 

 

 

 

enable the service mode account, the

 

 

 

 

customer must log in with an account that

 

 

 

 

has SuperUser rights and set this attrib to

 

 

 

 

yes. After service mode is enabled, a

 

 

 

 

service professional can log in to the

 

 

 

 

system with a secret one-time password.

 

 

 

 

To disable service mode, set the attrib to

 

 

 

 

no.

 

 

 

 

To clear this value, use a period (.).

 

 

 

 

Example:

 

 

 

 

set pwd.service-enable=false

 

 

 

 

 

 

 

 

pwd.user-add

Used to add a user and specify the user’s

String

write-only

 

 

default user group. User names must

 

 

 

 

comply with the rules defined by

 

 

 

 

pwd.level. You must also specify a user

 

 

 

 

group in the form of

 

 

 

 

?usergroup=username.

 

 

 

 

Example:

 

 

 

 

set pwd.user-add?superuser=

 

 

 

 

johnsmith

 

 

 

 

 

 

 

 

pwd.user-age

Attribute used to set the maximum age for

Int

read-write

 

 

a password.

 

 

 

 

 

 

 

 

pwd.user-del

Used to delete a user.

String

write-only

 

 

 

 

 

 

pwd.user-desc

Attribute used to describe the user

String

read-write

 

 

account.

 

 

 

 

 

 

 

 

pwd.user-email

Attribute used for the user account email

Email

read-write

 

 

address.

 

 

 

 

 

 

 

 

Security Management System CLI Reference 35

Image 45
Contents HP TippingPoint Security Management System CLI Reference Unix is a registered trademark of The Open Group Table of Contents SMS Attributes and Objects List of Tables Page About This Guide Document Conventions Document Messages Customer Support Using the Command Line Interface Remote Paths Help Command Lists all commands, objects, and attributes Cls ClearConsole DateDir FactoryresetDns ExitFtp GetHelp Ifconfig IpconfigKbdcfg Key MgmtsettingsList MonitorPassword NicsettingsNotify NtpPing Ping6 RebootQuit ResolveRestart Service-accessReverse RoutesSet SetupShutdown SnmpSnmp-trap Snmp-requestSnmpwalk SnmpgetSsh TimeTraceroute TouchUsers Update‘read-only’ VersionView WebWho Cli SMS Attributes and ObjectsCtl To set ctl.upgrade-source , this takes Time that the database was String Read-only Re-initialized High availability Health Indication for Celsius Designation KbdLicense Net LogsFor information on set net, see set on Related Commands 11 net Attributes Description Type Access Range Pkg 13 pkg Attributes Description Type Access Range Pwd Radius RadiusPAP, CHAP, MSCHAP, MSCHAP2 EAPMD5 RouteSmtp Route6SHA DES Attrib used to remove an Snmp trap String Write-only TripleDES Examples Snmp.trap-user Svc To true. To disable, set to false Example Sys 24 time Attributes Description Type Access Range SMS Attributes and Objects
Related manuals
Manual 252 pages 61.66 Kb Manual 68 pages 46.8 Kb Manual 54 pages 53.98 Kb