SunScreen 3.2 Administration Guide

Configuration Editor authuser Subcommands

To manipulate authorized user objects, use the authuser subcommand. authuser is unusual in that it uses its own subcommands, which are listed in the following table.

Table 10-4 authuser Subcommands


`authuser` Subcommand	Description
`add` `"name" item...`	Creates or overwrites an object. This subcommand takes a complete description of the object, beginning with its name, followed by desired items and subitems.
`delete` `"name"`	Deletes a named object.
`names` `[,sortopt]`	Displays the names of all authorized user objects. The default is `asc`. The sort options are:`asc` ascending order by name (case-sensitive) `desc` descending order by name (case-sensitive).`iasc` ascending order by name (case-insensitive).`idesc` descending order by name (case-insensitive).`raw` order stored in database.
`print` `[,sortopt] ["name"]`	Displays one or more objects. With no object specified, `print` displays all `AUTHUSER` objects; specifying a name causes only that object's definition to be displayed.

To Add An Authorized User with Password Authentication

Type the following to add an authorized user named Audrey Farber for local administration:

edit> authuser add admin1 PASSWORD={ "foo" } 
CONTACT_INFO=bj@bobo REAL_NAME="Audrey Farber" 
DESCRIPTION="created for remote administration"

Although the password is in plain text when you add a user, it is automatically encrypted, and the password will be displayed as empty quotation marks (" "). Enabled is the default.

Note -

The description field cannot contain single (` `) or double (" ") quotation marks, as in the description: This user, test_user, is for `testing' only.

All changes apply to the object immediately; however, for the changes to take effect in policy and administrative access rules, you must activate the policy.

To Add An Authorized User and SecurID Name

Type the following to add an authorized user named Audrey Farber for local administration:

edit> authuser add admin1 SECURID={ "C2BR" } 
CONTACT_INFO=bj@bobo 
REAL_NAME="Audrey Farber" 
DESCRIPTION="created for local administration"

Type the following to add an authorized user for remote administration:
edit> authuser add admin1 SECURID={ "C2BR" } CONTACT_INFO=bj@bobo DESCRIPTION="created for remote administration"
Enabled is the default. All changes apply to the object immediately; however, for the changes to take effect in policy and administrative access rules, you must activate the policy.

To Display Authorized Users

Type the following to display a list of authorized user objects as they appear in the database:

edit> authuser names,raw

The following list is displayed:

barbara.bobo
admin
melanie.haber
admin
audry.farber
admin

To Modify Authorized Users

Use the authuser add subcommand to modify the information for a user.

For example, to change the SecurID name from C3BR to C4BR:

edit> authuser add admin1 SECURID={ "C4BR" } 
CONTACT INFO=bj@bobo REAL_NAME="Audrey Farber" 
DESCRIPTION="created for remote administration"

The new parameters for the user will overwrite the old parameters. All changes apply immediately.

Modifications to passwords or SecurID passcodes take place immediately. For other changes to take effect in policy and administrative access rules, you must activate the policy.

To Delete an Authorized User

Use the authuser delete subcommand to delete an authorized user, for example:

edit> authuser delete admin1

All changes apply immediately.