Forum Discussion

GreenWanderer_3's avatar
GreenWanderer_3
Icon for Nimbostratus rankNimbostratus
Aug 09, 2018

Default CLI Preferences for Remote Role Users

Hello,

 

I have been investigating configuring LTM to make users who log in via a remote-role (authenticating with TACACS) see a specific prompt at tmsh.

 

I understand that cli preferences are configured in /config/bigip_user.conf, and that the preference can be modified by each user, but what I am trying to understand is how I can manipulate the cli preferences for users who log in under the remote roles BEFORE they would modify the preferences.

 

How does the system determine the cli-preference for users who log in under a remote role?

 

Thanks

 

1 Reply

  • Hi,

     

    The CLI preferences are user specific shell preferences, which I doubt could be controlled as a global parameter.

     

    The behavior of cli preference settings are same for local and remote users, freely controlled by individual accounts.

     

    • If a local user (root) logins and make cli preference settings change, the preferences changes are applied to that particular localuser account (root) alone. Once the config is saved, the same can be seen on the bigip_users.conf file.

       

    • Similarly, if a tacacs user (abc123) logins and make cli preference settings change, the preferences changes are applied to that particular tacacs users id alone. Once the config is saved, the same can be seen on the bigip_users.conf file.

       

    I haven't personally seen a global property which can be used to apply the preference for all.