User Guide

OmniAccess SafeGuard OS Administration Guide
258
Chapter 6: Configuring Authentication and Role Derivation
Maintaining Users
SafeGuard OS has a local authentication mechanism built-in to the authentication
manager. You can use SafeGuard OS’ authentication in stand-alone mode or use it with
external authentication servers such as RADIUS. The local system also serves as a local
mechanism to derive the role for a given user.
The database contains an entry for each user, which includes the user name, password,
and the role being assigned to the user.
Adding or Deleting a User from the Local Authentication Database
The following sections describe adding and deleting users from the local authentication
database.
■ Adding Users to the Database
■ Deleting a User from the Database
■ Continuing or Stopping Assigning Roles
Adding Users to the Database
Enter the aaa user command in Global Configuration mode.
aaa user username passwd password {role role}
Bind Failures The number of times the system has failed to find to this
server.
Other Errors The total number of failures, other than bind and
timeouts, that have occurred on this server.
Syntax Description username The name of the user being added to
the database. User names can be up
to 31 characters long.
Note: If you are adding a MAC RADIUS
user, use the MAC address without
colons as the uname and pwd.
password The login password. Login passwords
can be up to 31 characters long.
role Once assigned, the user no longer runs
role derivation; the system uses this
assignment. This is an optional
parameter.
Field Description