Aaa Authorization Exec - HP ProCurve 7102dl Reference Manual

SROS Command Line Interface Reference Guide

aaa authorization exec

Use the aaa authorization exec command to set authorization lists for exec shell. This allows a user to
enter directly into Enable mode for new CLI sessions when authorized. For more detailed information on
authentication, authorization, and accounting (AAA) functionality, refer to the Technology Review section
of the command aaa on on page 321. Use the no form of this command to remove a configured list of
authorization commands. Variations of this command include:
aaa authorization exec <listname> none
aaa authorization exec <listname> group <groupname>
aaa authorization exec <listname> group tacacs+
aaa authorization exec <listname> if-authenticated
aaa authorization exec <listname> if-authenticated group <groupname>
aaa authorization exec <listname> if-authenticated group tacacs+
aaa authorization exec default none
aaa authorization exec default group <groupname>
aaa authorization exec default group tacacs+
aaa authorization exec default if-authenticated
aaa authorization exec default if-authenticated group <groupname>
aaa authorization exec default if-authenticated group tacacs+
Syntax Description
default
group <groupname
tacacs+
if-authenticated
<listname>
none
Default Values
By default, the authorization exec is disabled.
5991-2114
Specifies the default authorization list and applies it implicitly across all
lines.
Specifies to use the named group remote server or the TACACS+ server for
authorization. Multiple groups can be specified. If the unit fails to make a
connection with the first group, it will try the next group specified. However,
if a connection is made to the first group and authorization fails, the unit will
not attempt authorization with any other groups in the list.
Specifies to use the TACACS+ server for authorization.
Succeeds if user has authenticated.
Specifies the name of the authorization list.
Grants access automatically.
© Copyright 2007 Hewlett-Packard Development Company, L.P.
Global Configuration Mode Command Set
318