Add a login method
Setting this parameter to service-processor grants the user access to the Service Processor (SP). Because the SP supports only password authentication, when you set this parameter to service-processor, you must also set the -authentication-method parameter to password. Vserver user accounts cannot access the SP. Therefore, you cannot use the -vserver parameter when you set this parameter to service-processor.
The following example illustrates how to create a login that has the user name monitor, the application ssh, the authentication method password, and the access-control role guest for Vserver vs:
cluster1::> security login create -vserver vs -user-or-group-name monitor -application ssh -authentication-method password -role guest
The following example illustrates how to create a login that has the user name monitor, the application ontapi, the authentication method password, and the access-control role vsadmin for Vserver vs:
cluster1::> security login create -vserver vs -user-or-group-name monitor -application ontapi -authentication-method password -role vsadmin
The following example illustrates how to create a login that has the user name monitor, the application ssh, the authentication method publickey, and the access-control role guest for Vserver vs:
cluster1::> security login create -vserver vs -user-or-group-name monitor -application ssh -authentication-method publickey -role guest
The following example illustrates how to create a login that has the user name monitor, the application http, the authentication method cert, and the access-control role admin for Vserver vs:
cluster1::> security login create -vserver vs -user-or-group-name monitor -application http -authentication-method cert -role admin
The following example illustrates how to create a login that has the Active Directory group name adgroup in DOMAIN1, the application ssh, the authentication method domain, and the access-control role vsadmin for Vserver vs:
cluster1::> security login create -vserver vs -user-or-group-name DOMAIN1\adgroup -application ssh -authentication-method domain -role vsadmin
The following example illustrates how to create a login that has a group name nssgroup in the LDAP or NIS server, the application ontapi, the authentication method nsswitch, and the access-control role vsadmin for Vserver vs. Here is-ns-switch-group must be set to yes:
cluster1::> security login create -vserver vs -user-or-group-name nssgroup -application ontapi -authentication-method nsswitch -role vsadmin -is-ns-switch-group yes
The following example illustrates how to create a login that has the user name monitor, the application ssh, the authentication method password, the second authentication method publickey and the access-control role vsadmin for Vserver vs:
cluster1::> security login create -vserver vs -user-or-group-name monitor -application ssh -authentication-method password -second-authentication-method publickey -role vsadmin
The following example illustrates how to create a login that has the user name monitor, the application ssh, the authentication method password, the second authentication method none and the access-control role vsadmin for Vserver vs:
cluster1::> security login create -vserver vs -user-or-group-name monitor -application ssh -authentication-method password -second-authentication-method none -role vsadmin