01-09-2013 01:17 PM
I can't seem to find any real information in the HP documentation about the aaa authorization group commands.
I would like to allow a utility user account to be able to do a copy command to an sftp server for automated backup and version control of our switches.
(We already have PCM+ 4.x but it doesn't provide quite the depth or granularity that we want.)
Is this possible? If so, how? We have a NAS server (Microsoft 2008 R2) providing Radius authentication, and have it configured already for operator / manager authorization. However, we don't want a script running that has the password for a manager-level domain account just lying around on the server.
service account user can use SCP to directly copy out the running-config file from the switch without having full enable mode privileges.
Failing that, the service account user can do a "show running-config" command without having full enable mode privileges.
Thanks in advance!
01-09-2013 01:32 PM