Setting Up Template Accounts; Creating A Remote Template Account - Juniper J2300 User Manual

Setting Up Template Accounts

You can create template accounts that are shared by a set of users when you
are using RADIUS or TACACS+ authentication. When a user is authenticated by
a template account, the CLI username is the login name, and the privileges, file
ownership, and effective user ID are inherited from the template account.
This section contains the following topics:

Creating a Remote Template Account

You can create a remote template that is applied to users authenticated by
RADIUS or TACACS+ that do not belong to a local template account.
By default, the JUNOS software uses the
The procedure provided in this section creates a sample user named
remote
To create a remote template account:
1.
2.
3.
4.
Creating a Remote Template Account on page 189
Creating a Local Template Account on page 190
The authenticated user does not exist locally on the Services Router.
The authenticated user's record in the RADIUS or TACACS+ server specifies
local user, or the specified local user does not exist locally on the router.
that belongs to the
operator
Navigate to the top of the configuration hierarchy in either the J-Web or CLI
configuration editor.
Perform the configuration tasks described in Table 61.
If you are finished configuring the network, commit the configuration.
To completely set up RADIUS or TACACS+ authentication, you must configure
at least one RADIUS or TACACS+ server and specify a system authentication
order.
Go on to one of the following procedures:
To configure a RADIUS server, see "Setting Up RADIUS Authentication"
on page 182.
To configure a TACACS+ server, see "Setting Up TACACS+ Authentication"
on page 183.
To specify a system authentication order, see "Configuring Authentication
Order" on page 185.
Managing Users and Files with a Configuration Editor
Managing Users and Operations
template account when
remote
login class.
189