Tripp Lite B093-004-2E4U-V Owner's Manual

Loading ...

218

14. Conﬁguration from the Command Line

To allow another group named ‘Group8’ access to the same host:

# conﬁg -s conﬁg.sdt.hosts.host5.groups.group2=Group8

# conﬁg -s conﬁg.sdt.hosts.host5.groups.total=2 (total number of users having access to host)

To delete the Group7, use the following command:

# rmuser Group7

Attention: The rmuser script is a generic script to remove any conﬁg element from conﬁg.xml correctly. However,

any dependencies or references to this group will not be affected. Only the group details are deleted. The

administrator is responsible for reviewing conﬁg.xml and removing group dependencies and references manually,

speciﬁcally if the group had access to a host or RPC device.

The following command will synchronize the live system with the new conﬁguration:

# conﬁg -a

14.1.4 Authentication

To change the type of authentication for the console server:

# conﬁg -s conﬁg.auth.type=’authtype’

‘authtype’ can be:

Local

LocalTACACS

TACACS

TACACSLocal

TACACSDownLocal

LocalRADIUS

RADIUS

RADIUSLocal

RADIUSDownLocal

LocalLDAP

LDAP

LDAPLocal

LDAPDownLocal

To conﬁgure TACACS authentication:

# conﬁg -s conﬁg.auth.tacacs.auth_server=’comma separated list’ (list of remote authentication and authorization servers.)

# conﬁg -s conﬁg.auth.tacacs.acct_server=’comma separated list’ (list of remote accounting servers. If unset, Authentication and

Authorization Server Address will be used.)

# conﬁg -s conﬁg.auth.tacacs.password=’password’

To conﬁgure RADIUS authentication:

# conﬁg -s conﬁg.auth.radius.auth_server=’comma separated list’ (list of remote authentication and authorization servers.)

# conﬁg -s conﬁg.auth.radius.acct_server=’comma separated list’ (list of remote accounting servers. If unset, Authentication and

Authorization Server Address will be used.)

# conﬁg -s conﬁg.auth.radius.password=’password’

To conﬁgure LDAP authentication:

# conﬁg -s conﬁg.auth.ldap.server=’comma separated list’ (list of remote servers.)

# conﬁg -s conﬁg.auth.ldap.basedn=’name’ (The distinguished name of the search base. For example: dc=my-company,dc=com)

# conﬁg -s conﬁg.auth.ldap.binddn=’name’ (The distinguished name to bind to the server with. The default is to bind anonymously.)

# conﬁg -s conﬁg.auth.radius.password=’password’

The following command will synchronize the live system with the new conﬁguration:

# conﬁg -r auth

Loading ...

Tripp Lite B093-004-2E4U-V 4-Port Console Server with 4G LTE Cellular Gateway, Dual GbE NIC, 4Gb Flash and Dual SIM

Owner's Manual - Page 218