Comware Based
1748165 Members
3751 Online
108758 Solutions
New Discussion

Re: checking my role

 
HPBeginner
Occasional Contributor

checking my role

Hello,

 with Comware7  what display show my network-type or role ?

With a display command I would like to see/check what is my network-type (network-operator, network-???, role-???)

 

the display users do not show me this information.

the display role gives information about each role, but do not show me what is my right.

regards

 

 

HP beginner
3 REPLIES 3
VoIP-Buddy
HPE Pro

Re: checking my role

Hi HPBeginner!

Welcome!

Try display local-user.  It will display all of the users and how many are active.  It will also sho your privileges.

Regards,

David

I work for HPE in Aruba Technical Support
HPBeginner
Occasional Contributor

Re: checking my role

hello David,

Your command only sho local-user, not me as I'm connected to the switch via a SSH session. I'm authenticatied remotely.

I want to check what is my privilege level as seen by the switch itself.  Do you know a way to check if we are "network-operator" or "network-admin" or any role   with a display command on Comware5 and Comware7 OS ?   (not tring to do any change on the box/switch). I have no lab (ACS/radius/tacacs, switch) to try.

For Comware5 (5.20):    it seems the display  users gives a Userlevel. I guess UserLevel 3 have all readWrite rights.

Any suggestion for Comware7 and others Comware5 release ?

 

Regards

HP beginner
VoIP-Buddy
HPE Pro

Re: checking my role

Hi!

The command is display local-user.  That should show you all of the users defined and what their privileges are.  You should know how you are logging in and could look for that username.  Can you attach the output from display local-user so I can see what you are seeing?

This is from a switch running Comware 5...

The contents of local user admin:
 State:                    Active
 ServiceType:              ftp/telnet/web
 Access-limit:             Disabled          Current AccessNum: 0
 User-group:               system
 Bind attributes:
 Authorization attributes:
  User Privilege:          3
The contents of local user ssh:
 State:                    Active
 ServiceType:              ftp/ssh
 Access-limit:             Disabled          Current AccessNum: 0
 User-group:               system
 Bind attributes:
 Authorization attributes:
  User Privilege:          3
Total 4 local user(s) matched.

What more do you want?  This is showing what you asked for.

Now, you say you are authenticated remotely.  By a RADIUS server?  If so, your permissions need to be defined on the RADIUS server for your username.  Is that done?

David

I work for HPE in Aruba Technical Support