HP 6125XLG R2306-HP 6125XLG Blade Switch Security Command Reference - Page 179

This authentication method is easy to use. If this method is configured, the authentication process completes automatically without the need of entering any password. assign publickey keyname: Assigns an existing host public key to an SSH user. The keyname argument is a string of 1 to 64 characters. Usage guidelines If the authentication method is publickey, you must create an SSH user and a local user. To get the correct working directory and user role, the local user must have the same username as the SSH user. If the authentication method is password-publickey or any, you must configure a local user account by using the local-user command for local authentication, or configure an SSH user account on an authentication server, for example, a RADIUS server, for remote authentication. If the authentication method is password, you do not need to execute this command to configure them unless you want to use the display ssh user-information command to display all SSH users, including the password-only SSH users, for centralized management. If you use the ssh user command to configure a host public key for a user who has already had a host public key, the most recent configuration takes effect. You can change the authentication method, service type, and host public key for an SSH user when the user is communicating with the SSH server, but your changes take effect on the clients at next login. For an SFTP or SCP user, the working directory depends on the authentication method: • If the authentication method is password, the working directory is authorized by AAA. • If the authentication method is publickey or password-publickey, the working directory is specified by the authorization-attribute command in the associated local user view. For an SSH user, the user role also depends on the authentication method: • If the authentication method is password, the user role is authorized by the remote AAA server or the local device. • If the authentication method is publickey or password-publickey, the user role is specified by the authorization-attribute command in the associated local user view. Examples # Create an SSH user named user1, set the service type as sftp and the authentication method as publickey, and assign a host public key named key1 to the user. system-view [Sysname] ssh user user1 service-type sftp authentication-type publickey assign publickey key1 # Create a local device management user named user1, set the password as 123456 in plain text and the service type as ssh, and assign the working directory as flash:, the user role as network-admin. [Sysname] local-user user1 class manage [Sysname-luser-manage-user1] password simple 123456 [Sysname-luser-manage-user1] service-type ssh [Sysname-luser-manage-user1] authorization-attribute work-directory flash: user-role network-admin Related commands • authorization-attribute • display ssh user-information • local-user 170