{"id":173,"date":"2014-10-29T10:52:55","date_gmt":"2014-10-29T09:52:55","guid":{"rendered":"https:\/\/zed-network.fr\/?p=173"},"modified":"2014-10-29T10:52:55","modified_gmt":"2014-10-29T09:52:55","slug":"nexus-rbac","status":"publish","type":"post","link":"https:\/\/zed-network.fr\/?p=173","title":{"rendered":"Nexus RBAC"},"content":{"rendered":"<p>When logging into a N5K or a N7K system VDC, the default User-Roles assigned is <strong>\u201cnetwork-operator\u201d<\/strong>. When logging into a VDC, the default User-Roles is <strong>\u201cvdc-operator\u201d.<\/strong><\/p>\n<p>You need to add a new shell role or you also can add multiple roles:<\/p>\n<pre><code class=\"perl plain\">shell:roles=<\/code><code class=\"perl string\">\"\\\"network-admin vdc-admin\\\"\"<\/code><\/pre>\n<pre># sh user-account\r\nuser:admin\r\n this user account has no expiry date\r\nroles:vdc-admin\r\nuser:account1\r\n roles:vdc-operator\r\naccount created through REMOTE authentication\r\nCredentials such as ssh server key will be cached temporarily only for this user\r\n account\r\nLocal login not possible<\/pre>\n<p>After modify your tacacs+ configuration, you need to clear the user account cached.<\/p>\n<pre>(config)# no username account1<\/pre>\n<p>Your user in cache disappears<\/p>\n<pre># sh user-account\r\nuser:admin\r\n this user account has no expiry date\r\n roles:vdc-admin\r\n\r\n<\/pre>\n<p>Verification :<\/p>\n<pre># sh user-account\r\nuser:admin\r\n this user account has no expiry date\r\n roles:vdc-admin\r\nuser:account1\r\n roles:vdc-admin<\/pre>\n<p>Now your user have the good right.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When logging into a N5K or a N7K system VDC, the default User-Roles assigned is \u201cnetwork-operator\u201d. When logging into a VDC, the default User-Roles is \u201cvdc-operator\u201d. You need to add a new shell role or you also can add multiple roles: shell:roles=&#8221;\\&#8221;network-admin vdc-admin\\&#8221;&#8221; # sh user-account user:admin this user account has no expiry date roles:vdc-admin [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-173","post","type-post","status-publish","format-standard","hentry","category-cisco"],"_links":{"self":[{"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/posts\/173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zed-network.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=173"}],"version-history":[{"count":1,"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/posts\/173\/revisions"}],"predecessor-version":[{"id":174,"href":"https:\/\/zed-network.fr\/index.php?rest_route=\/wp\/v2\/posts\/173\/revisions\/174"}],"wp:attachment":[{"href":"https:\/\/zed-network.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zed-network.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zed-network.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}