[nsp] enable commands as non-enable user?

Josh Duffek jduffek@cisco.com
Mon, 12 Aug 2002 14:02:11 -0500


well the thing is...ios figures if you arent priveledged enough to change
the config, why should you get to look at it...did you try with "sh config"
and "sh run" or just one of em?  (sorry i dont have time to test myself
right now)

joshd

----- Original Message -----
From: "Barry Bruins" <bbruins@cisco.com>
To: "Josh Duffek" <jduffek@cisco.com>; "Bruce Campbell"
<bruce.campbell@ripe.net>; <cisco-nsp@puck.nether.net>
Sent: Monday, August 12, 2002 1:44 PM
Subject: Re: [nsp] enable commands as non-enable user?


> Ughh.  I'm embarrassed.  You're right.  It may require a TACACS+ server
> in the mix.
>
> Barry
>
> At 01:06 PM 8/12/2002 -0500, Josh Duffek wrote:
> >just fyi...im 99% sure you cant do this for "sh run"...but i never tried
for
> >"sh config".
> >
> >joshd
> >
> >----- Original Message -----
> >From: "Barry Bruins" <bbruins@cisco.com>
> >To: "Bruce Campbell" <bruce.campbell@ripe.net>;
<cisco-nsp@puck.nether.net>
> >Sent: Monday, August 12, 2002 12:24 PM
> >Subject: Re: [nsp] enable commands as non-enable user?
> >
> >
> >> Use the privilege command to set the show running-config to another
level.
> >>
> >> Barry
> >>
> >> At 06:29 PM 8/12/2002 +0200, Bruce Campbell wrote:
> >>
> >> >Greetings,
> >> >
> >> >I'm wanting to allow a dedicated non-enabled user to be able to 'show
> >> >conf' (run through all the routers and save the conf nightly).  Is
this
> >> >possible via AAA (tacacs+)?  ( the AAA overview on cco isn't that
clear
> >on
> >> >whether this is possible or not)
> >> >
> >> >--==--
> >> >Bruce.
> >> >
> >> >_______________________________________________
> >> >cisco-nsp mailing list  real_name)s@puck.nether.net
> >> >http://puck.nether.net/mailman/listinfo/cisco-nsp
> >> >archive at http://puck.nether.net/pipermail/cisco-nsp/
> >>
> >
> >_______________________________________________
> >cisco-nsp mailing list  real_name)s@puck.nether.net
> >http://puck.nether.net/mailman/listinfo/cisco-nsp
> >archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>