Creating Custom Appliance User Accounts

LunaSH allows you to create custom, named user accounts on the SafeNet Luna Network HSM appliance. These users are assigned one of the standard appliance roles, or a custom role that you create (see Creating Custom Appliance Roles). Use this procedure to create custom user accounts.

User Naming Guidelines

LunaSH user names can be 1-32 characters long, chosen from letters a-z, or A-Z, numbers 0-9, the dash, the dot, or the underscore:

abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._

No spaces are allowed. User names cannot begin with a dot, dash, or number.

As with any secure system, no two users (regardless of role) can have the same name.

To create a custom user account

1.Connect to the appliance via SSH or a serial connection, and log in to LunaSH as admin or a custom user with an admin role (see Logging In to LunaSH).

2.Create the custom user account (see user add).

lunash:>user add -username <username>

lunash:>user add -username james

Stopping sshd:                                             [  OK  ]

Starting sshd:                                             [  OK  ]

Command Result : 0 (Success)

3.Assign a role to the new user account (see user role add).

lunash:>user role add -username <username> -role <rolename>

lunash:>user role add -username james -role admin

User james was successfully modified.

Command Result : 0 (Success)

The user of this account can now log in to LunaSH with the account name and default password "PASSWORD". See Logging In to LunaSH.