Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Setting Up UNIX Users or Groups

 

This section describes how to add, edit, or delete a UNIX user or group.

Adding a UNIX User or Group

Adding a UNIX User or Group

To add a UNIX user or group using the Web GUI:

  1. Select RADIUS Configuration > Users > Unix Users.

    The Unix Users List page (Figure 39) appears.

    Figure 39: Unix Users List Page
    Unix Users List Page
  2. Click Add.

    The Create Unix User pane (Figure 40) appears with the Basic Configuration tab selected.

    Figure 40: Create Unix User Pane—Basic Configuration
    Create Unix User Pane—Basic
Configuration
  3. Search for the users or groups that you want to add in the Name field.
    • If you want to add a user, select the User option button and select the name of a user from the drop-down list.

    • If you want to add a group, select the Group option button and select the name of a user group from the drop-down list.

  4. Optionally, enter a description for the UNIX user or group in the Description field.
  5. If you want to use a profile to assign check list and return list attributes to the user, select the Use Profile check box and use the drop-down list to select the profile.Note

    Attributes inherited from a profile are overridden by attributes assigned to a specific user.

  6. If you want to specify the maximum number of concurrent connections the UNIX user can maintain, select the Concurrency check box and enter a number in the Max Connections field.

    When the user requests access, the user can be authenticated using the given authentication method only if fewer than the number of connections are currently open for the user.

  7. To add check list or return list attributes for the UNIX user or group, click the Attributes tab (Figure 41).
    Figure 41: Create Unix User Pane—Attributes
    Create Unix
User Pane—Attributes
  8. Click Add under the CheckList area or the ReturnList area.

    The Add CheckList Attribute or Add ReturnList Attribute dialog box (Figure 42) appears.

    Figure 42: Add CheckList Attribute and Add ReturnList Attribute Dialogs
    Add
CheckList Attribute and Add ReturnList Attribute Dialogs
  9. Select the attribute you want to add to the check list or return list from the attributes list.

    You can search the attributes by entering the attribute name in the text box.

  10. Select or enter a value for the selected attribute.

    The dialog changes according to the attribute you choose. Some attributes require that you enter a value, string, or IP address. Other attributes require that you choose from a fixed list of values.

    The Multivalued check box always appears dimmed, so you cannot select or clear this check box. If the Multivalued check box appears cleared, an attribute can have only one value. If the Multivalued check box appears selected, you can add multiple values for the attribute.

    The Orderable check box always appears dimmed, so you cannot select or clear this check box. If the Orderable check box appears selected, you can define the order of the multi-valued attributes. If the Orderable check box appears cleared, the attribute is neither a multi-valued attribute nor an orderable attribute.

    (Check list attributes only) To set the attributes value to the default value (which is useful in situations where the attribute is not included in the RADIUS request), select the Default check box.

    (Return list single-valued attributes only) If you do not want to specify a particular value, but want to make sure that whatever value of the attribute appears in the RADIUS request is echoed to the client in the RADIUS response, select the Echo check box.

    Note

    The echo property is disabled for multi-valued return list attributes.

    Note

    You cannot define multiple instances of Framed-IPv6-Address attributes in a return list or check list. The Framed-IPv6-Address attribute can appear only once in a return list or check list.

  11. Click Add Attribute to add this AVP to the list.
  12. Repeat steps 9 through 11 to add more return list or check list attributes for the user.
  13. When you are finished adding AVPs, click Close.

    The CheckList area or the ReturnList area in the Create Unix User pane (Figure 41) displays the updated list of selected attributes.

    You can modify the return or check list by using the Edit and Delete buttons. You can reorder the attributes by selecting each attribute and using the Up or Down arrow.

    Note

    The Up arrow is disabled, if the selected attribute is not orderable or if the selected attribute is already the first value. The Down arrow is disabled, if the selected attribute is not orderable or if the selected attribute is already the last value.

  14. Optionally, if you have added a structured or parent attribute to the UNIX user or group, add its subattributes to the structured or parent attribute. For more information about how to add subattributes to a structured or parent attribute, see Adding Subattributes to a Structured Attribute.
  15. Click Save to save the UNIX user or group configuration.

    The Unix Users List page (Figure 39) displays an updated list of UNIX user or group entries.

Editing a UNIX User or Group

Editing a UNIX User or Group

To edit a UNIX user or group entry using the Web GUI:

  1. Select RADIUS Configuration > Users > Unix Users.

    The Unix Users List page (Figure 39) appears.

  2. Select the UNIX user or group entry that you want to edit.

    The Selected Unix User pane (Figure 43) displays the settings configured for the UNIX user or group entry.

    Figure 43: Selected Unix User Pane
    Selected Unix User Pane
  3. Edit the settings for the UNIX user or group entry as appropriate.

    For information about the fields in the Selected User pane, see Adding a UNIX User or Group.

    Note

    You cannot edit the name of the UNIX user or group.

  4. Click Save to save the changes.

    The Unix Users List page (Figure 39) displays an updated list of UNIX user or group entries.

Deleting a UNIX User or Group

Deleting a UNIX User or Group

To delete a UNIX user or group entry using the Web GUI:

  1. Select RADIUS Configuration > Users > Unix Users.

    The Unix Users List page (Figure 39) appears.

  2. Select the UNIX user or group entry that you want to delete.
  3. Click Delete.

    A confirmation dialog box is displayed.

  4. Click Yes to confirm the delete request.

    The Unix Users List page (Figure 39) displays an updated list of UNIX user or group entries.