77
1. 8 7 7. 8 7 7. 2 26 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.87 7.2269
CHAPTER 5: SERIAL PORT, HOST DEVICE AND USER CONFIG
5.2 ADD AND EDIT USERS
The Administrator uses this menu selection to set up, edit and delete users and to define the access permissions for each of these
users.
Users can be authorized to access specified services, serial ports, power devices and specified network-attached hosts. These
users can also be given full Administrator status (with full configuration and management and access privileges).
To simplify user set up, they can be configured as members of Groups. With firmware V3.5.2 and later, there are six Groups set up
by default (earlier versions only had admin and user by default).
TABLE 5-4. USER GROUPS
GROUP DESCRIPTION
admin Provides users with unlimited configuration and management privileges.
pptpd Group to allow access to the PPTP VPN server. Users in this group will have their password stored in clear text.
dialin Group to allow access to the dialin server. Users in this group will have their password stored in clear text.
ftp Group to allow ftp access and file access to storage devices.
pmshell Group to set default shell to pmshell.
users Provides users with basic management privileges.
Membership of the admin group provides the user with full Administrator privileges. The admin user (Administrator) can access the
console server using any of the services that have been enabled in System: Services, e.g., if only HTTPS has been enabled, then the
Administrator can only access the console server using HTTPS. Once logged in, they can reconfigure the console server settings
(e.g., to enabled HTTP/Telnet for future access). They can also access any of the connected Hosts or serial port devices using any
of the services that have been enabled for these connections. But again the Administrator can reconfigure the access services for
any Host or serial port. So only trusted users should have Administrator access.
Membership of the user group provides the user with limited access to the console server and connected Hosts and serial devices.
These Users can access only the Management section of the Management Console menu and they have no command line access
to the console server. They also can only access those Hosts and serial devices that have been checked for them, using services
that have been enabled.
If a user is set up with pptd, dialin, ftp or pmshell group membership, he will have restricted user shell access to the nominated
managed devices but will not have any direct access to the console server itself. To add this, the user must also be a member of
the "users" or "admin" groups.
The Administrator can also set up additional Groups with specific power device, serial port and host access permissions. Users in
these additional groups don’t have any access to the Management Console menu nor do they have any command line access to the
console server itself.
The Administrator can also set up users with specific power device, serial port and host access permissions, who are not a
member of any Groups. Similarly, these users don’t have any access to the Management Console menu, nor do they have any
command line access to the console server itself.
For convenience, the SDT Connector “Retrieve Hosts” function retrieves and auto-configures checked serial ports and checked
hosts only, even for admin group users.
To Next Page