Manuals / Cisco Systems / Household Appliance / Home Security System

Cisco Systems OL-5742-01 # ./sgm passwordage clear, #./sgm clitimeout number-of-minutes, 18-13

Models: OL-5742-01

1 42

Download 42 pages 34.07 Kb

Page 13

# ./sgm passwordage clear

Chapter 18 Configuring SGM Security

Configuring SGM User-Based Access

If you have enabled this function and you want to disable it (that is, prevent SGM from forcing users to change passwords), enter the following command:

# ./sgm passwordage clear

Note If sgm authtype is set to solaris, you cannot use the sgm passwordage

command. Instead, you must manage passwords on the external authentication servers.

Step 7 (Optional) You can configure SGM to disconnect an SGM or GTT client automatically after a specified number of minutes of inactivity. To do so, enter the following command:

#./sgm clitimeout number-of-minutes

where number-of-minutesis the number of minutes an SGM or GTT client can be inactive before SGM disconnects the client.

The valid range is 1 minute to an unlimited number of minutes. There is no default value.

This function is disabled by default. If you do not specify the sgm clitimeout command, clients are never disconnected as a result of inactivity.

If you have enabled this function and you want to disable it (that is, never disconnect a client as a result of inactivity), enter the following command:

# ./sgm clitimeout clear

		Cisco Signaling Gateway Manager User Guide
		Cisco Signaling Gateway Manager User Guide
	OL-5742-01			18-13
	OL-5742-01			18-13

Image 13

Cisco Systems OL-5742-01 # ./sgm passwordage clear, #./sgm clitimeout number-of-minutes, # ./sgm clitimeout clear, 18-13

Contents

Configuring SGM User-BasedAccess, page Configuring SGM User-BasedAccessCreating Secure Passwords, page 18-5 Required Implementing SSL Support in SGM, page#cd /opt/CSCOsgm/bin #./sgm useraccess enable Implementing SGM User-BasedAccess Solaris Only18-2 sgm adduser -sgm disableuser -sgm enableuser sgm disablepass -sgm passwordage -sgm userpasssgm updateuser #./sgm authtype local# ./sgm sgm adduser username # ./sgm authtype solaris18-4 18-5 Creating Secure PasswordsPower User Level 2 Access, page Basic User Level 1 Access, pageNetwork Operator Level 3 Access, page Network Administrator Level 4 Access, page18-7 Basic User Level 1 AccessNetwork Operator Level 3 Access Power User Level 2 Access18-8 System Administrator Level 5 Access Network Administrator Level 4 Access18-9 System Messages and Logs 18-10# ./sgm badloginalarm clear # ./sgm badloginalarm number-of-attempts# ./sgm badlogindisable number-of-attempts # ./sgm badlogindisable clear# ./sgm inactiveuserdays number-of-days # ./sgm passwordage number-of-days# ./sgm inactiveuserdays clear 18-12#./sgm clitimeout number-of-minutes # ./sgm passwordage clear# ./sgm clitimeout clear 18-13# ./sgm deluser username # ./sgm disablepass username18-14 # cd /opt/CSCOsgm/bin18-15 # ./sgm disableuser username# ./sgm userpass username # ./sgm enableuser usernamepage 18-1618-17 # ./sgm updateuser username# ./sgm newlevel username Displaying a Message of the Day18-18 Field or Button Last UpdatedDescription Message of the DayDecline #cd /opt/CSCOsgm/bin #./sgm motd enable# ./sgm motd edit 18-20# ./sgm motd disable Manually Synchronizing Local SGM PasswordsListing All Currently Defined Users # ./sgm motd cat# ./sgm listusers username Disabled#cd /opt/CSCOsgm/bin #./sgm seclog 18-22Restoring Security-RelatedSGM Data #cd /opt/CSCOsgm/bin #./sgm restore security# ./sgm seclog clear 18-23#cd /opt/CSCOsgm/bin #./sgm useraccess disable Disabling SGM User-BasesAccessSpecifying a Super User Solaris Only # ./sgm restartsgm certtool -sgm clean -sgm cleanall sgm backup -sgm browserpath -sgm certguisgm cleandb -sgm cw2ksetup -sgm evilstop sgm reboot -sgm restore -sgm restorepropssgm webport -sgm xtermpath Implementing SSL Support in SGMEnabling SSL Support in SGM, page Launching the SGM Certificate Tool for SSL, pageExporting an SSL Certificate, page Enabling SSL Support in SGMManaging SSL Support in SGM, page Disabling SSL Support in SGM, page# ./sgm keytool import cert cert filename opt/CSCOsgm/etc/ssl/server.csr is a CSR18-28 Step 5 Restart the SGM client 18-29SGM displays the SGM Server Home page 18-30#cd /opt/CSCOsgm/bin #./sgm certgui Launching the SGM Certificate Tool for SSL18-31 Issued by Issued toExpiration Date ImportDetails Importing an SSL Certificate to an SGM ClientExit HelpExporting an SSL Certificate CancelLook In File Name18-35 Save InField or Button Description18-36 SaveCancel Field or ButtonChapter 18 Configuring SGM Security 18-37Cisco Signaling Gateway Manager User Guide Figure 18-5Certificate Information DialogSubject IssuerVersion Serial numberDisabling SSL Support in SGM Managing SSL Support in SGM18-39 Step 2 Enter the following command 18-40# cd /opt/CSCOsgm/bin #./sgm ipaccess edit #./sgm ipaccess add18-41 Any changes you make to the ipaccess.conf file take effect when you restart the SGM server 18-42