Users Guide

username sshkey lename
Enables SSH password-less login for remote clients using multiple public keys. A remote client is not prompted to enter a password.
Syntax
username username sshkey filename filepath
Parameters
• username — Enter an OS10 user name who logs in on a remote client. This value is the user name congured
using the username password role command.
• filepath — Enter the absolute path name of the local le containing the public keys used by remote devices
to log in to the OS10 switch.
Default
The default SSH server keys are an RSA key generated using 2048 bits, an ECDSA key with 256 bits, and an
Ed2559 key with 256 bits.
Command Mode
• CONFIGURATION
Usage Information
Before you use the command, locate the public keys on a remote client in the ~/.ssh/id_rsa.pub le. Create
a text le and copy the SSH public keys on the remote client into the le. Enter each public key on a separate line.
Download the le to your home OS10 directory.
NOTE: Entering the command when an SSH key le is not present has no eect and results in a silent
failure. SSH password-less login is not enabled.
The no version of the command removes the SSH password-less conguration for the specied user name.
Example
OS10(config)# username user10 sshkey filename /test_file.txt
OS10(config)# do show running-configuration users
username admin password $6$q9QBeYjZ$jfxzVqGhkxX3smxJSH9DDz7/3OJc6m5wjF8nnLD
7/VKx8SloIhp4NoGZs0I/UNwh8WVuxwfd9q4pWIgNs5BKH. role sysadmin
username user10 password $6$rounds=656000$G10VRFTJB291ekwo$iTGf0zd4bTUcBBpI
Vsbr6oStnUZMydN5lDs4WE6G3XHEtWbcKrGTeAo1wEF0cenEgRRPzi3SMmYyzAHCCC8wS0 role
sysadmin
username user10 sshkey filename /test_file.txt
Supported Releases 10.4.1.0 or later
userrole inherit
Recongures the default netoperator role and permissions that OS10 assigns by default to a RADIUS or TACACS+-authenticated user
with an unknown user role or privilege level. You can also congure an unknown RADIUS or TACACS+ user role to inherit permissions from
an existing OS10 role.
Syntax
userrole {default | name} inherit existing-role-name
Parameters
• default inherit — Recongure the default permissions assigned to an authenticated user with a missing
or unknown role or privilege level.
• name inherit — Enter the name of the RADIUS or TACACS+ user role that inherits permissions from an
OS10 user role; 32 characters maximum.
•
existing-role-name — Assign the permissions associated with an OS10 user role:
Security 973