CLI User Authentication and Authorization
Page 134 7750 SR RADIUS Attributes Reference Guide
26-6527-6 Timetra-Cmd Command string, subtree command-string or a list of command-strings as
scope for the match condition for user authorization. Multiple command-
strings in the same attribute are delimited with the; character. Additional
command-strings are encoded in multiple attributes. If the maximum number
of command strings is violated, or if a string is too long, processing the input
is stopped but authorization continues, so if the radius server is configured to
have 5 command strings of which the 3rd is too long, only the first 2 entries
will be used and the rest will be ignored. Each [26-6527-6] Timetra-Cmd
attribute is followed in sequence by a [26-6527-7] Timetra-Action. (A missing
Timetra-Action results in a deny). Note: For each authenticated RADIUS user
a temporary profile with name [1]User-Name is always created (show system
security profile) and executed as last profile. This temporary profile is build
from the mandatory attribute [26-6527-5]Timetra-Default-Action and
optional attributes [26-6527-6] Timetra-Cmd, [26-6527-7] Timetra-Action.
26-6527-7 Timetra-Action Action to be used in case a user's command matches the commands specified
in [26-6527-6] Timetra-Cmd attribute. Action deny is used if attribute is
omitted and the [26-6527-5] Timetra-Default-Action is used when no match is
found. Note: [26-6527-6]Timetra-Cmd, [26-6527-7]Timetra-Cmd and [26-
6527-8]Timetra-Cmd are an alternative for [26-6527-4]Timetra-Profile. Note:
For each authenticated RADIUS user a temporary profile with name [1]User-
Name is always created (show system security profile) and executed as last
profile. This temporary profile is build from the mandatory attribute [26-
6527-5]Timetra-Default-Action and optional attributes [26-6527-6] Timetra-
Cmd, [26-6527-7] Timetra-Action.
26-6527-8 Timetra-Exec-File Specifies the file that is executed whenever the user is successfully
authenticated.
Table 44: CLI User Authentication and Authorization (description) (Continued)
Attribute ID Attribute Name Description
To Next Page
Loading...
