Viewing The Username Configuration - Cisco FirePOWER ASA 5500 series Configuration Manual

Configuring User Attributes

Viewing the Username Configuration

To display the configuration for all usernames, including default values inherited from the group policy,
enter the all keyword with the show running-config username command, as follows:
hostname# show running-config all username
hostname#
This displays the encrypted password and the privilege level. for all users, or, if you supply a username,
for that specific user. If you omit the all keyword, only explicitly configured values appear in this list.
The following example displays the output of this command for the user named testuser:
hostname# show running-config all username testuser
username testuser password 12RsxXQnphyr/I9Z encrypted privilege 15
Configuring Attributes for Specific Users
To configure specific users, you assign a password (or no password) and attributes to a user using the
username command, which enters username mode. Any attributes that you do not specify are inherited
from the group policy.
The internal user authentication database consists of the users entered with the username command. The
login command uses this database for authentication. To add a user to the security appliance database,
enter the username command in global configuration mode. To remove a user, use the no version of this
command with the username you want to remove. To remove all usernames, use the clear configure
username command without appending a username.
Setting a User Password and Privilege Level
Enter the username command to assign a password and a privilege level for a user. You can enter the
nopassword keyword to specify that this user does not require a password. If you do specify a password,
you can specify whether that password is stored in an encrypted form.
The optional privilege keyword lets you set a privilege level for this user. Privilege levels range from 0
(the lowest) through 15. System administrators generally have the highest privilege level. The default
level is 2.
hostname(config)# username name {nopassword | password password [encrypted]} [privilege
priv_level]}
hostname(config)# no username [name]
Table 30-6
Keyword/Variable
encrypted
name
nopassword
Cisco Security Appliance Command Line Configuration Guide
30-70
describes the meaning of the keywords and variables used in this command.
Table 30-6
Meaning
Indicates that the password is encrypted.
Provides the name of the user.
Indicates that this user needs no password.
Chapter 30 Configuring Tunnel Groups, Group Policies, and Users
username Command Keywords and Variables
OL-10088-01