Specifications

3-399
Cisco Wide Area Application Services Command Reference
OL-11817-01
Chapter 3 CLI Commands
(config) username
User Authentication
User access is controlled at the authentication level. For every HTTP request, including every WAAS
CLI request, that arrives at the WAAS device, the authentication level has visibility into the supplied
username and password. Based on CLI-configured parameters, a decision is then made to either accept
or reject the request. This decision is made either by checking local authentication or by performing a
query against a remote authentication server. The authentication level is decoupled from the
authorization level, and there is no concept of role or domain at the authentication level.
When local CLI authentication is used, all configured users can be displayed by entering the show
running-config EXEC command.
User Authorization
Domains and roles are applied by the WAAS device at the authorization level. Requests must be accepted
by the authentication level before they are considered by the authorization level. The authorization level
regulates access to resources based on the specified role in WAAS Central Manager GUI and domain
configuration.
Regardless of the authentication mechanism, all user authorization configuration is visible in the GUI.
Examples The following example demonstrates how passwords and privilege levels are reconfigured:
WAE# show user username abeddoe
Uid : 2003
Username : abeddoe
Password : ghQ.GyGhP96K6
Privilege : normal user
WAE# show user username bwhidney
Uid : 2002
Username : bwhidney
Password : bhlohlbIwAMOk
Privilege : normal user
WAE(config)# username bwhidney password 1 victoria
WAE(config)# username abeddoe privilege 15
User's privilege changed to super user (=15)
WAE# show user username abeddoe
Uid : 2003
Username : abeddoe
Password : ghQ.GyGhP96K6
Privilege : super user
WAE# show user username bwhidney
Uid : 2002
Username : bwhidney
Password : mhYWYw.7P1Ld6
Privilege : normal user
Related Commands show user