Index  |  Top  -  Up Data ONTAP 8.2

security login create

Add a login method

Availability: This command is available to cluster administrators at the admin privilege level.

Description

The security login create command creates a login method for the management utility. A login method consists of a user name, an application (access method), and an authentication method. A user name can be associated with multiple applications. It can optionally include an access-control role name.

Parameters

-vserver <vserver name> - Vserver

This specifies the Vserver name of the login method.

-username <text> - User Name

This specifies the user name of the login method.

-application <text> - Application

This specifies the application of the login method. Possible values include console, http, ontapi, rsh, snmp, service-processor, ssh, and telnet.

Setting this parameter to service-processor grants the user access to the Remote LAN Module (RLM) or the Service Processor (SP), if it is available on the system. Because the RLM and the SP support only password authentication, when you set this parameter to service-processor, you must also set the -authmethod parameter to password. Vserver user accounts cannot access the RLM or the SP. Therefore, you cannot use the -vserver parameter when you set this parameter to service-processor.

-authmethod <text> - Authentication Method

This specifies the authentication method of the login method. Possible values include the following:

-role <text> - Role Name

This specifies an access-control role name for the login method.

[-comment <text>] - Comment Text

This specifies comment text for the user account, for example, "Guest account". The maximum length is 128 characters.

Examples

The following command creates a login that has the user name monitor, the application ssh, the authentication method password, and the access-control role guest for Vserver vs.

cluster1::> security login create -username monitor -application ssh -authmethod password -role guest -vserver vs

The following command creates a login that has the user name monitor, the application ontapi, the authentication method password, and the access-control role vsadmin for Vserver vs.

cluster1::> security login create -username monitor -application ontapi -authmethod password -role vsadmin -vserver vs

The following command creates a login that has the user name monitor, the application ssh, the authentication method publickey, and the access-control role guest for Vserver vs.

cluster1::> security login create -username monitor -application ssh -authmethod publickey -role guest -vserver vs

The following command creates a login that has the user name monitor, the application http, the authentication method cert, and the access-control role admin for Vserver cluster.

cluster1::> security login create -username monitor -application http -authmethod cert -role admin -vserver cluster

The following command creates a login that has the user name monitor in DOMAIN1, the application ssh, the authentication method domain, and the access-control role vsadmin for Vserver vs.

cluster1::> security login create -username DOMAIN1\monitor -application ssh -authmethod domain -role vsadmin -vserver vs

The following command creates a login that has a login name monitor in the LDAP or NIS server, the application ssh, the authentication method nsswitch, and the access-control role vsadmin for Vserver vs.

cluster1::> security login create -username monitor -application ssh -authmethod nsswitch -role vsadmin -vserver vs

Index  |  Top  -  Up Data ONTAP 8.2