Configuring User Accounts for Web Applications (SRC CLI)

User accounts provide one way for clients to authenticate with the application server. For each account, you define the login name for the user and authentication information. You can configure plain text password or encrypted password as the type of authentication for user accounts. When you delete user accounts, the software verifies that the user account is not referenced by another configuration.

Note: Client profiles can be cached by applications for 30 minutes. If you change the password or role of a client that has been used within the last 30 minutes, it can take up to 30 minutes before these changes take effect.

If you do not want to wait 30 minutes for the changes to take effect, restart the Web application server.

Use the following configuration statements to configure user accounts at the [edit] hierarchy level:



shared application-server user name



shared application-server user name authentication {
encrypted-password encrypted-password;
plain-text-password;
}

To configure a user account:

From configuration mode, access the configuration statement that configures a user account, and specify a username that identifies the client. user@host# edit shared application-server user name
The username must be unique within the system. Do not include spaces, colons, or commas in the username.
Configure authentication for the user account. [edit shared application-server user name] user@host# set authentication (plain-text-password | encrypted-password)
where:
- plain-text-password—Prompt for a plain text (unencrypted) password.
- encrypted-password—Password encoded with crypt. The format of encrypted passwords is "{crypt}<13-characters in a-zA-Z0-9./>".
We recommend that you do not enter the password in encrypted format.

For example:
user@host# set authentication plain-text-password New password: type password here Retype new password: retype password here