User Guide

OmniAccess SafeGuard OS Administration Guide
250
Chapter 6: Configuring Authentication and Role Derivation
The fields in the output represent:
Showing an Extended White List Configuration
To display the configuration of one or more white list entries, use the show aaa extended
white-list configuration command in Privileged Exec mode:
show aaa extended white-list configuration {whitelist_name}
The following example is representative of the command output:
(SafeGuardOS) #show aaa extended white-list configuration whinstall
aaa extended white-list WHinstall
description "DHCP installs white list"
operation and
match attribute-rule installMachine
set system.userName "INSTALL"
set system.roleName "ONLYIT"
(SafeGuardOS) #
Configuring Grey Lists
A user on a grey list is ignored during authentication.For environments where scripts are
pushed-down from the system to users on a regular basis, you can filter PDU events by
creating a grey list for the administrator. Entries that are on a grey list are not logged by
the system.
Field Description
Precedence The precedence order for the white list. Valid values are
1 through 65535, with 1 being the highest precedence
value.
White List Name The name of the white list entry.
Hit Count The number of times a white list’s condition has matched
causing the variables to be set.
Hit Failures The number of times a match was made, but the
variable could not be assigned.
Syntax Description whitelist_name (Optional) Displays the configuration for
the specified white list entry. If you do not
specify a white list name, all configured
white list entries are displayed.