Juniper JUNOS OS 10.3 - XML MANAGEMENT PROTOCOL GUIDE 6-30-2010 Manual page 50

Junos 10.3 Junos XML Management Protocol Guide
28
Alternatively, you can skip this section and enable authentication through RADIUS or
TACACS+; for instructions, see the chapter about system authentication in the Junos
System Basics Configuration Guide.
To determine whether a login account exists on a device running Junos OS, enter the CLI
configuration mode on the device and issue the following commands:
[edit]
user@host# edit system login
[edit system login]
user@host# show user account-name
If the appropriate account does not exist, perform the following steps:
Include the statement at the
user
1.
username. Also include the
hierarchy level, and specify a login class that has the permissions required for all
actions to be performed by the application. You can also include the optional
and statements. Optionally, include the
full-name uid
[edit system login]
user@host# set user account-name class class-name
NOTE: For detailed information about creating user accounts, see the chapter about
configuring user access in the Junos System Basics Configuration Guide.
Create a text-based password for the account by including either the
2.
or
plain-text-password
account-name authentication]
[edit system login]
user@host# edit user account-name authentication
NOTE: A text-based password is not strictly necessary if the account is used to access
the Junos XML protocol server through SSH with public/private key pairs for
authentication, but we recommend that you create one anyway. The key pair alone is
sufficient if the account is used only for SSH access, but a password is required if the
account is also used for any other type of access (for login on the console, for example).
The password is also used—the SSH server prompts for it—if key-based authentication
is configured but fails. For information about creating a public/private key pair, see
"Prerequisites for SSH Connections" on page 30.
To enter a password as text, issue the following command. You are prompted for
the password, which is encrypted before being stored.
[edit system login user account-name authentication]
user@host# set plain-text-password
New password: password
Retype new password: password
[edit system login]
class statement at the
statement at the
encrypted-password
hierarchy level.
hierarchy level and specify a
[edit system login user username]
and statements.
full-name uid
[edit system login user
Copyright © 2010, Juniper Networks, Inc.