CSPC Version 2.8 - Create addition SSH login Cisco Service Platform Collector.

[rhallan]

We need to set up an addition  SSH/CLI login account that has a lot less privileges than the admin/Collectorlogin account (like read only or basic commands) . This is for security scanners to be able to scan the CSPC collector; this is done for most servers in the environment.

Is this account setup possible, if yes where can I find the instrunctions to do this.

Thanks.

[agkher]

Hi,

Let us check upon the details and get back to you with an update.

[agkher]

Hi,

You can provide a total of 5 roles to users depending upon the type of access you want to give them.

The step to access this is-

Under manage users-> add user-> group membership

Please contact us if you require further assistance regarding this is issue.

[agkher]

Hi,

Please feel free to ping us if you require any further assistance.

[rhallan]

This appears to be for GUI users.

We need to create addition CLI login account with limited previlages.

Creating GUI login accounts is fine the issue appears to be how to create CLI login accounts.

[agkher]

Hi,

Please try the below CLI commands

Login as a root

add user by using command useradd <username>

Then set a pass for the created user by using command passwd <username>

After setting the password he can if the user is created successfully or not by switch user command su <username>

Then enter the pass.

After checking login, go to the root and change the permission by using the command chmod permissiontype user name.

Then use 'ls -ltr' to check permission.

Please update us of the above command lines if it helpful or not.

[agkher]

Hi,

Do we have any update on this issue?

[agkher]

Hi,

Do we have any updates on this case?

[rhallan]

I am locked out of account collectorlogin (it says due to unsuccesfull attempts), not sure how to unlock as I do not have any CLI access. Tried te=-booting the server that did not help me to login as user collectorlogin.