Nokia 7750 - Page 156

RADIUS Attributes Reference
156
RADIUS ATTRIBUTES REFERENCE GUIDE
RELEASE 14.0.R4
3HE 10793 AAAB TQZZA 01 Issue: 01
26-6527-6 Timetra-Cmd Command string, subtree command-string or a list of command-strings
as scope for the match condition for user authorization. Multiple
command-strings in the same attribute are delimited with the; character.
Additional command-strings are encoded in multiple attributes. If the
maximum number of command strings is violated, or if a string is too
long, processing the input is stopped but authorization continues, so if
the radius server is configured to have 5 command strings of which the
3rd is too long, only the first 2 entries will be used and the rest will be
ignored. Each [26-6527-6] Timetra-Cmd attribute is followed in
sequence by a [26-6527-7] Timetra-Action. (A missing Timetra-Action
results in a deny).
Note that for each authenticated RADIUS user a temporary profile with
name [1]User-Name is always created (show system security profile)
and executed as last profile. This temporary profile is build from the
mandatory attribute [26-6527-5]Timetra-Default-Action and optional
attributes [26-6527-6] Timetra-Cmd, [26-6527-7] Timetra-Action.
26-6527-7 Timetra-Action Action to be used in case a user's command matches the commands
specified in [26-6527-6] Timetra-Cmd attribute. Action deny is used if
attribute is omitted and the [26-6527-5] Timetra-Default-Action is used
when no match is found.
Notes:
• [26-6527-6]Timetra-Cmd, [26-6527-7]Timetra-Cmd and [26-
6527-8]Timetra-Cmd are an alternative for [26-6527-
4]Timetra-Profile.
• For each authenticated RADIUS user a temporary profile
with name [1]User-Name is always created (show system
security profile) and executed as last profile. This temporary
profile is build from the mandatory attribute [26-6527-
5]Timetra-Default-Action and optional attributes [26-6527-6]
Timetra-Cmd, [26-6527-7] Timetra-Action.
26-6527-8 Timetra-Exec-File Specifies the file that is executed whenever the user is successfully
authenticated.
Table 54 CLI User Authentication and Authorization (Description) (Continued)
Attribute ID Attribute Name Description
Table 55 CLI User Authentication and Authorization (Limits)
Attribute ID Attribute
Name
Type Limits SR OS Format
1 User-Name string 32 chars Example: User-Name = “admin”