Skip to content

Commit

Permalink
superuser
Browse files Browse the repository at this point in the history
  • Loading branch information
jimmccarron committed Jan 16, 2025
1 parent c198125 commit 3c1f53d
Showing 1 changed file with 11 additions and 5 deletions.
16 changes: 11 additions & 5 deletions docs/rseries_security.rst
Original file line number Diff line number Diff line change
Expand Up @@ -1320,23 +1320,29 @@ The next step would be to create a user and assign the primary and secondary rol
.. code-block:: bash
system aaa authentication users user f5shuser1 config username f5shuser1 role admin
system aaa authentication users user f5shuser1 config set-password password
r10900-1-gsa(config)# system aaa authentication users user f5shuser1 config username f5shuser1 role admin
r10900-1-gsa(config-user-f5shuser1)# exit
r10900-1-gsa(config)# system aaa authentication users user f5shuser1 config set-password
Value for 'password' (<string>): ********
Next, you will need to assign a secondary role of superuser to the f5shuser1 account.
.. code-block:: bash
system aaa authentication roles role superuser config users f5shuser1
system aaa authentication config superuser-bash-access true
r10900-1-gsa(config)# system aaa authentication roles role superuser config users f5shuser1
r10900-1-gsa(config-role-superuser)# exit
r10900-1-gsa(config)# system aaa authentication config superuser-bash-access true
r10900-1-gsa(config)# commit
Commit complete.
r10900-1-gsa(config)#
Assigning a user to the superuser group with a secondary role is not enough to give them access the bash shell, you must also set the following F5OS command to **true** to enable bash shell access for users assigned to the superuser group.
.. code-block:: bash
system aaa authentication config superuser-bash-access true
.. code-block:: bash
login to the device using f5shuser1.
Expand Down

0 comments on commit 3c1f53d

Please sign in to comment.