Just to prove Tyson's point I tested for everyone:

sensor# sho users all
    CLI ID   User    Privilege
*   443      cisco   administrator

I then added a new service account called "ME"

sensor# sho user all
    CLI ID   User    Privilege
*   465      cisco   administrator
             ME      service

Then I Logged in using the "ME" account

-bash-2.05b$ grep ME /etc/passwd
ME:x:102:50::/home/ME:/bin/bash
-bash-2.05b$ grep service /etc/passwd
-bash-2.05b$ <no output for  username service>

-B

From: [email protected] 
[mailto:[email protected]] On Behalf Of Tyson Scott
Sent: Tuesday, February 22, 2011 8:15 AM
To: 'Kingsley Charles'; 'Tyson Scott'
Cc: [email protected]
Subject: Re: [OSL | CCIE_Security] OEQ-related question about IPS "Service" 
account

Copy paste from the documentation.  Again service is a user role.  What I am 
trying to get to is that it isn't a built in user.

Users Pane Field Definitions
The following fields are found in the Users pane:
*Username-The username. The value is a string 1 to 64 characters in length that 
matches the pattern ^[A-Za-z0-9()+:,_/-]+$.
*Role-The user role. The values are Administrator, Operator, Service, and 
Viewer. The default is Viewer.

I know it says service account when talking about the creation of the user but 
why I am trying to differentiate the two is that it is not already created.  
You have to create a user and assign the role of service.  Service is a user 
role.

Regards,

Tyson Scott - CCIE #13513 R&S, Security, and SP
Managing Partner / Sr. Instructor - IPexpert, Inc.
Mailto: [email protected]<mailto:[email protected]>
Telephone: +1.810.326.1444, ext. 208
Live Assistance, Please visit: 
www.ipexpert.com/chat<http://www.ipexpert.com/chat>
eFax: +1.810.454.0130

IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio 
Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, 
Voice, Security & Service Provider) certification(s) with training locations 
throughout the United States, Europe, South Asia and Australia. Be sure to 
visit our online communities at 
www.ipexpert.com/communities<http://www.ipexpert.com/communities> and our 
public website at www.ipexpert.com<http://www.ipexpert.com/>

From: Kingsley Charles [mailto:[email protected]]
Sent: Monday, February 21, 2011 11:47 PM
To: Tyson Scott
Cc: Mark Senteza; [email protected]
Subject: Re: [OSL | CCIE_Security] OEQ-related question about IPS "Service" 
account

Hi Tyson

But it is still a built-in account in the sensor.

With regards
Kings
On Tue, Feb 22, 2011 at 8:01 AM, Tyson Scott 
<[email protected]<mailto:[email protected]>> wrote:
service isn't an account it is a user role.  So there are 4 user roles.

Regards,

Tyson Scott - CCIE #13513 R&S, Security, and SP
Managing Partner / Sr. Instructor - IPexpert, Inc.
Mailto: [email protected]<mailto:[email protected]>
Telephone: +1.810.326.1444, ext. 208
Live Assistance, Please visit: 
www.ipexpert.com/chat<http://www.ipexpert.com/chat>
eFax: +1.810.454.0130

IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio 
Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, 
Voice, Security & Service Provider) certification(s) with training locations 
throughout the United States, Europe, South Asia and Australia. Be sure to 
visit our online communities at 
www.ipexpert.com/communities<http://www.ipexpert.com/communities> and our 
public website at www.ipexpert.com<http://www.ipexpert.com/>

From: 
[email protected]<mailto:[email protected]>
 
[mailto:[email protected]<mailto:[email protected]>]
 On Behalf Of Mark Senteza
Sent: Monday, February 21, 2011 8:20 PM
To: [email protected]<mailto:[email protected]>
Subject: [OSL | CCIE_Security] OEQ-related question about IPS "Service" account

Hello all,

Is the "service" account considered a "built-in" user role ?

If asked how many built-in user roles does the IPS sensor have and what are 
they, would the "Service" account be amongst them ?

Mark

_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com<http://www.ipexpert.com>

<<inline: image001.png>>

_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to