xenial (7) eurephiadm-adminaccess.7.gz

NAME

       eurephiadm-adminaccess - Access control for eurephia administration features

DESCRIPTION

       The eurephiadm adminaccess is used to grant eurephia users access to the different administration modules
       in eurephia.

       Available modes for the adminaccess command are:

       -G | --grant
              Grant a specific access level to a user

       -R | --revoke
              Revoke access levels

       -l | --list
              List all granted accesses

       -h | --help <mode> Help about a specific mode

LIST MODE

       The list mode will show the granted user access levels

       -i | --uid
              User account ID

       -u | --username
              User name

       -I | --interface
              Which interfaces to show (default "C")

       -a | --access-level Which access level to show

GRANT MODE

       The grant mode will grant a user access to a specified access level.

       -i | --uid
              User account ID

       -I | --interface
              Grant access through which interface (default "C")

       -a | --access-level Which access level to grant access to

REVOKE MODE

       The revoke mode will remove an access from the desired user accounts.

       -i | --uid
              User account ID

       -I | --interface
              Revoke access from interface (default "C")

       -a | --access-level Which access level to revoke access from

ACCESS LEVELS

       attempts
              This access level grants access to the eurephiadm attempts command. The attempts command can list,
              reset or delete login attempts records in the database.

       blacklist
              This  is  similar  to  the attempts access. It provides access to the eurphiadm blacklist command,
              where you can list, add or delete blacklisted usernames, certificate digests or IP addresses.

       certadmin
              This level is needed to use the eurephiadm certs command. This commands  provides  you  access  to
              list,  add  or  delete  certificate  information  which  the  eurephia plug-in will use during the
              authentication process.

       config This level grants access to the eurephiadm config and eurephiadm show-config commands. The  latter
              command  will  list  out  both  the eurephiadm config file and all configuration parameters in the
              database. The config command is used to set or delete configuration parameters in the database.

       fwprofiles
              This access level is needed to list, add or delete firewall profiles eurephia which may use.

       useradmin
              This provides access to the eurephiadm users and eurephiadm usercerts commands, which is  used  to
              create  or  delete  user  accounts  and  link  the user accounts together with a certificate and a
              firewall access profile.

SEE ALSO

       eurephiadm(7)

AUTHOR

       Copyright (C) 2008-2012  David Sommerseth <dazo@users.sourceforge.net>