Check Roles

This scenario shows how to configure and use OSDx user roles.

Test Monitor Role

Description

A new user teldat is created using the predefined monitor role. This kind of role allows the execution of a reduced set of operational commands.

Scenario

Step 1: Set the following configuration in DUT0 :

set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system login user teldat authentication encrypted-password '$6$6BpqxLKxRUk3n6aK$KE431BEtymouTxD.iHHa.illnpjvXeHqygEYUGdMxWTG7thQcYFnOnDDLm85GHqMsWd/9LuTe./VUNxdEkU/f.'
set system login user teldat role monitor

Step 2: Run the command service cnm restart on DUT0 and expect the following output:

Step 3: Run the command show running on DUT0 and expect the following output:

Step 4: Run the command show date on DUT0 and expect the following output:

Step 5: Login as admin user on DUT0:

admin@osdx

Note

Dynamically change the required user-level for some specific operational commands.

Step 6: Modify the following configuration lines in DUT0 :

set user-level 0 command 'show running'
set user-level 10 command 'show date'

Step 7: Run the command service cnm restart on DUT0 and expect the following output:

Step 8: Run the command show running on DUT0 and expect the following output:

Step 9: Run the command show date on DUT0 and expect the following output:

Step 10: Login as admin user on DUT0:

admin@osdx

Test Operator Role

Description

A new user teldat is created using the predefined operator role. This kind of role allows the execution of some operational commands.

Scenario

Step 1: Set the following configuration in DUT0 :

set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system login user teldat authentication encrypted-password '$6$0lyLgG8puRaZYSv9$TqYq4ravqXd4Lv2cZzC7F7/t9Uk/PV5WiJUFK7GV/f6L0D06YIHVi1.M71uKnepZ.2uhwjiaiTvP7CeFNxgrC.'
set system login user teldat role operator

Step 2: Run the command service cnm restart on DUT0 and expect the following output:

Step 3: Run the command show running on DUT0 and expect the following output:

Step 4: Run the command show date on DUT0 and expect the following output:

Step 5: Login as admin user on DUT0:

admin@osdx

Note

Dynamically change the required user-level for some specific operational commands.

Step 6: Modify the following configuration lines in DUT0 :

set user-level 0 command 'show running'
set user-level 10 command 'show date'

Step 7: Run the command service cnm restart on DUT0 and expect the following output:

Step 8: Run the command show running on DUT0 and expect the following output:

Step 9: Run the command show date on DUT0 and expect the following output:

Step 10: Login as admin user on DUT0:

admin@osdx

Test Admin Role

Description

A new user teldat is created using the predefined admin role. This kind of role allows the execution of all operational commands and has access to the configuration menu.

Scenario

Step 1: Set the following configuration in DUT0 :

set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system login user teldat authentication encrypted-password '$6$Pf.UYjbU7NhHQK.t$qHKHr8UjT5Ym7Aq2VLP2TlwwtLgt3DQriRmowDa9aaPM8l9/GhKIoCPa3mVgYnYs0uXXa7D53S5.Ggh6MKTDG1'
set system login user teldat role admin

Step 2: Run the command service cnm restart on DUT0 and expect the following output:

Step 3: Run the command show running on DUT0 and expect the following output:

Step 4: Run the command show date on DUT0 and expect the following output:

Step 5: Login as admin user on DUT0:

admin@osdx

Note

Dynamically change the required user-level for some specific operational commands.

Step 6: Modify the following configuration lines in DUT0 :

set user-level 0 command 'show running'
set user-level 10 command 'show date'

Step 7: Run the command service cnm restart on DUT0 and expect the following output:

Step 8: Run the command show running on DUT0 and expect the following output:

Step 9: Run the command show date on DUT0 and expect the following output:

Step 10: Login as admin user on DUT0:

admin@osdx

Test Custom Role

Description

A new user teldat is created using a custom role. The user-level can be dynamically changed.

Scenario

Step 1: Set the following configuration in DUT0 :

set system login role custom_role level 8
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'
set system login user teldat authentication encrypted-password '$6$ka8wjKpRZy1N6FdQ$vQ/4nandFBvzpr./LJT2T.c636uMv62JUg5hy4Iffgc4qwxs/UyV9XLQQxTmWyaRjC6.wUh1FcWLnOd2.2gfl/'
set system login user teldat role custom_role

Step 2: Run the command service cnm restart on DUT0 and expect the following output:

Step 3: Run the command show running on DUT0 and expect the following output:

Step 4: Run the command show date on DUT0 and expect the following output:

Step 5: Login as admin user on DUT0:

admin@osdx

Step 6: Modify the following configuration lines in DUT0 :

set system login role custom_role level 14

Step 7: Run the command service cnm restart on DUT0 and expect the following output:

Step 8: Run the command show running on DUT0 and expect the following output:

Step 9: Run the command show date on DUT0 and expect the following output:

Step 10: Login as admin user on DUT0:

admin@osdx

Step 11: Modify the following configuration lines in DUT0 :

set system login role custom_role level 3

Step 12: Run the command service cnm restart on DUT0 and expect the following output:

Step 13: Run the command show running on DUT0 and expect the following output:

Step 14: Run the command show date on DUT0 and expect the following output:

Step 15: Login as admin user on DUT0:

admin@osdx