Table of Contents
Advertisement
ssh user username service-type { all | sftp } authentication-type { password | { any | password-
publickey | publickey } assign publickey keyname work-directory directory-name }
undo ssh user username
View
System view
Default level
3: Manage level
Parameters
username: SSH username, a case-sensitive string of 1 to 80 characters.
service-type: Specifies the service type of an SSH user, which can be one of the following values:
all: Specifies both secure Telnet and secure FTP.
sftp: Specifies the service type as secure FTP.
stelnet: Specifies the service type of secure Telnet.
authentication-type: Specifies the authentication method of an SSH user, which can be one of the
following values:
password: Performs password authentication.
any: Performs either password authentication or publickey authentication.
password-publickey: Specifies that SSH2 clients perform both password authentication and
publickey authentication and that SSH1 clients perform either type of authentication.
publickey: Performs publickey authentication.
assign publickey keyname: Assigns an existing public key to an SSH user. keyname indicates the name of
the client public key and is a string of 1 to 64 characters.
work-directory directory-name: Specifies the working directory for an SFTP user. directory-name indicates
the name of the working directory and is a string of 1 to 135 characters.
Description
Use the ssh user command to create an SSH user and specify the service type and authentication method.
Use the undo ssh user command to delete an SSH user.
For a publickey authentication user, you must configure the username and the public key on the device.
For a password authentication user, you can configure the account information on either the device or the
remote authentication server, such as a RADIUS server.
If you use the ssh user command to configure a public key for a user who has already had a public key,
the new one overwrites the old one.
You can change the authentication method and public key of an SSH user when the user is
communicating with the SSH server. However, your changes take effect only after the user logs out and
logs in again.
If an SFTP user has been assigned a public key, it is necessary to set a working folder for the user.
The working folder of an SFTP user is subject to the user authentication method. For a user using only
password authentication, the working folder is the AAA authorized one. For a user using only publickey
authentication or using both publickey authentication and password authentication, the working folder is
the one set by using the ssh user command.
270
Advertisement
Table of Contents
