[j-nsp] Enforcing CLI Idle-Timeouts

[Stefan Fouant]

I hope the only other option isn't going to mean that I have to
configure a custom login class and assign the various CLI permissions.
That would be a real PITA. I wish there were some way to pass this
information off from our TACACS+ server but alas it seems that the
junos_exec service class has very limited command shell authorizations

Hopefully someone on-list has found a solution....



On 7/21/08, Christian Koch <christian at broknrobot.com> wrote:
> i tried this a while back and came across the same issue, i've yet to be
> able to find a 'hack' since..
>
> christian
>
>
>
> On Mon, Jul 21, 2008 at 4:56 PM, Stefan Fouant <sfouant at gmail.com> wrote:
>
>> Hey Folks,
>>
>> Wondering if anyone knows how to enforce CLI Idle-Timeouts on Juniper
>> using default login classes such as Super-User.  I see that there is a
>> command 'idle-timeout' which can be configured under a login class,
>> but I want to modify the default class 'super-user' which has a
>> default of idle-timeout 0/disabled.  It does not appear that I can
>> modify the default login classes.
>>
>> Anyone here ever attempt anything similar?
>>
>> --
>> Stefan Fouant
>> Principal Network Engineer
>> NeuStar, Inc. - http://www.neustar.biz
>> GPG Key ID: 0xB5E3803D
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>
>

-- 
Sent from Gmail for mobile | mobile.google.com

Stefan Fouant
Principal Network Engineer
NeuStar, Inc. - http://www.neustar.biz
GPG Key ID: 0xB5E3803D