Reference Guide

username sshkey filename
Enables SSH password-less login for remote clients using multiple public keys. A remote client is not prompted to enter a
password.
Syntax
username user_name sshkey filename file_path
Parameters
● user_name — Enter an OS10 user name who logs in on a remote client. This value is the user name configured with the username password role command.
● file_path — Enter the absolute path name of the local file containing the public keys used by remote devices to log in to the OS10 switch.
Default
The default SSH server keys are an RSA key generated using 2048 bits, an ECDSA key with 256 bits, and an Ed2559 key with 256 bits.
Command Mode CONFIGURATION
Usage
Information
Before you use the command, locate the public keys on a remote client in the ~/.ssh/id_rsa.pub file. Create a text file and copy the SSH public keys on the remote
client into the file. Enter each public key on a separate line. Download the file to your home OS10 directory.
NOTE: Entering the command when an SSH key file is not present has no effect and results in a silent failure. SSH password-less login is not enabled.
The no username user_name sshkey command removes the SSH password-less configuration for the specified user name.
Example
OS10(config)# username user10 sshkey filename /test_file.txt
OS10(config)# do show running-configuration users
username admin password $6$q9QBeYjZ$jfxzVqGhkxX3smxJSH9DDz7/3OJc6m5wjF8nnLD7/VKx8SloIhp4NoGZs0I/
UNwh8WVuxwfd9q4pWIgNs5BKH. role sysadmin
username user10 password
$6$rounds=656000$G10VRFTJB291ekwo$iTGf0zd4bTUcBBpIVsbr6oStnUZMydN5lDs4WE6G3XHEtWbcKrGTeAo1wEF0cenEgRRPzi3SMmYyzAHCCC8wS0
role sysadmin
username user10 sshkey filename /test_file.txt
Supported
Releases
10.4.1.0 or later
userrole default inherit
Reconfigures the default netoperator role assigned to a TACACS+-authenticated user.
Syntax
userrole default inherit existing-role-name
Parameters
● existing-role-name — Enter a user role:
○ sysadmin — Full access to all commands in the system, exclusive access to commands that
manipulate the file system, and access to the system shell. A system administrator can create user
IDs and user roles.
○ secadmin — Full access to configuration commands that set security policy and system access,
such as password strength, AAA authorization, and cryptographic keys. A security administrator
can display security information, such as cryptographic keys, login statistics, and log information.
○ netadmin — Full access to configuration commands that manage traffic flowing through the
switch, such as routes, interfaces, and ACLs. A network administrator cannot access configuration
commands for security features or view security information.
○ netoperator — Access to EXEC mode to view the current configuration. A network operator
cannot modify any configuration setting on a switch.
Default OS10 assigns the netoperator role to a user authenticated by a TACACS+ server with a missing or
unknown role.
Command Mode CONFIGURATION
Usage
Information
● When a TACACS+ server authenticates a user and does not return a role or returns an unknown
role, OS10 assigns the netoperator role to the authenticated user by default. Use this command to
reconfigure the default netoperator role.
● The no userrole default version of the command resets the role to netoperator.
514 System management