ce how to disable authentication from command line

[david.lung]

hi,

I can select disable authentication from web page

(--> Authentication --> Authentication Scheme --> then select "Disable Authentication" but how can I do it from command line.

Regards

[seilsz]

Depending on which [configured] method you want to disable, you would use:

no radius-server enable

no tacacs enable

no ldap server enable

no ntlm server enable

~Zach

[david.lung]

thanks

[david.lung]

HI Zach

I have another question for authentication scheme

If I disable the following external authentication servers, I think CE may not be able to authenticate the administrators to logon CE itself. Would these commands affect the authentication method for the administrators to logon the CE? What I want are 1) No authentication for browsing users to use CE, and 2) User authentication (via RADIUS) is needed for administrators to logon and configure CE.

It seems to me that "Authentication Scheme" is applied for the browsing users to use CE data (e.g. obtain cached web objects). Please clarify

[seilsz]

Hi David,

If you are referring to the "Authentication Scheme" nomenclature in the GUI, then that is used for HTTP request authentication. The "Login Authentication" section is used for authenticating admin console/telnet users.

In the CLI, I believe that the 'servername enable' command determines whether or not the configured servers are used for HTTP request authentication. The global 'authentication ...' command controls admin console/telnet authentication.

~Zach

[david.lung]

Hi Zach,

Can you show me the detail about 'servername enable' command I cannot find this command in the command line reference.

[seilsz]

Sorry ... "servername" is really a variable for the authentication scheme (ldap, radius, ntlm, tacacs).

~Zach

[david.lung]

Hi can you clarify is there any command can disable the Authentication Scheme directly in the cmmand line.

[seilsz]

The following commands will perform what you request:

no radius-server enable

no tacacs enable

no ldap server enable

no ntlm server enable

Note that typing these commands will not prevent you from enabling tacacs or radius for login authentication.

~Zach

[david.lung]

Hi Zach,

You give me many useful information thanks