CLI Script Authorization Commands

cli-script

Syntax

cli-script

Context

config>system>security

Description

This command enables the context to configure CLI script security.

authorization

Syntax

authorization

Context

config>system>security>cli-script

Description

This command enables the context to authorize CLI script execution for CRON and Event Handling System (EHS) scripts.

cron

Syntax

cron

Context

config>system>security>cli-script>authorization

Description

This command enables the context to configure authorization for the CRON scheduler.

cli-user

Syntax

cli-user user-name

no cli-user

Context

config>system>security>cli-script>authorization>cron

config>system>security>cli-script>authorization>event-handler

Description

This command defines the user context under which CRON and EHS CLI scripts must execute in order to authorize the script commands. The user must be a local user; TACACS+ and RADIUS users and authorization are not permitted for cli-script authorization.

Two unique users can be defined: one to authorize CLI commands for CRON scripts and one to authorize CLI commands for EHS scripts.

The no form of this command configures scripts to execute with no restrictions and without performing authorization.

Default

no cli-user

Parameters

user-name

the name of a user in the local node database. TACACS+ or RADIUS users cannot be used. The user configuration must reference a valid local profile for authorization.

event-handler

Syntax

event-handler

Context

config>system>security>cli-script>authorization

Description

This command enables the context to configure authorization for EHS. EHS is a tool that enables operator-defined behavior to be configured on the 7705 SAR. The operator can define a CLI script that the router executes in response to a log event.