vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-12-16 18:42:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Login: respructure chapters Local and RADIUS

Browse Source
This commit is contained in:
Christian Poessinger 2019-04-20 14:24:27 +02:00
parent 0a0e3c5ebd
commit b9c39bb1ab
1 changed files with 22 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
docs/system/system-users.rst
View File

@ -1,16 +1,18 @@
.. _systemusers: .. _systemusers:
System Users Login
------------ -----
The default vyos user account, as well as newly created user accounts, have all The default VyOS user account (`vyos`), as well as newly created user accounts,
capabilities to configure the system. All accounts have sudo capabilities and have all capabilities to configure the system. All accounts have sudo capabilities
therefore can operate as root on the system. Setting the level to admin is and therefore can operate as root on the system. Setting the level to admin is
optional, all accounts on the system will have admin privileges. optional, all accounts on the system will have admin privileges.
Both local administered and remote administered RADIUS (Remote Authentication
Dial-In User Service) accounts are supported.
Creating Login User Accounts Local
^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ^^^^^
Create user account `jsmith` and the password `mypassword`. Create user account `jsmith` and the password `mypassword`.
@ -38,8 +40,8 @@ will show the contents of :code:`system login` configuration node:
level admin level admin
} }
SSH Access using Shared Public Keys SSH with Public Keys
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ********************
The following command will load the public key `dev.pub` for user `jsmith` The following command will load the public key `dev.pub` for user `jsmith`
@ -55,8 +57,17 @@ The following command will load the public key `dev.pub` for user `jsmith`
loadkey jsmith scp://devuser@dev001.vyos.net/home/devuser/.ssh/dev.pub loadkey jsmith scp://devuser@dev001.vyos.net/home/devuser/.ssh/dev.pub
RADIUS authentication backend In addition SSH public keys can be fully added using the CLI. Each key can be
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ given a unique identifier, `calypso` is used oin the example below to id an SSH
key.
.. code-block:: sh
set system login user jsmith authentication public-keys callisto key 'AAAAB3Hso...Q=='
set system login user jsmith authentication public-keys callisto type 'ssh-rsa'
RADIUS
^^^^^^
VyOS supports using one or more RADIUS servers as backend for user authentication. VyOS supports using one or more RADIUS servers as backend for user authentication.