Virtual TapeServer 8.0 Configuration Guide

102 | Configuring User Accounts
Restricting access to bill
The bill account has the same access rights as the root account. You can restrict access of the
bill account, thereby forcing users to use vtsa and denying access to functions that may
present security vulnerabilities.
To restrict access to bill
1. Log in to the VTS server as root.
2. Edit the /etc/ssh/sshd_config file to add this line:
DenyUsers bill
Or, if a remote export job, Instant DR, or AutoCopy is configured in your environment,
add this line:
AllowUsers vtsa bill@source_svr
where source_svr is the IP address or hostname of the VTS server where the replication
operation is originating.
3. Restart the SSH service by entering this command:
service sshd restart
Managing web interface accounts
Here is a list of the default user accounts provided for accessing the VTS web interface:
If you have system administrator privileges, you can configure access control to grant or limit
access to specific VTS functions. Each login ID belongs to a group and each group has a
unique set of privileges.
Note VTS provides a user that has administrator privileges. You can log in as admin if no
other administrative user is created on the system. The default password for this user
is virtual.
By default, VTS is a closed system, which means that users are required to authenticate
before they can access the web interface. Access control enables you to establish rights for
specific users or classes of users. You can fine tune control of VTS system resources on a
group-by-group basis. A closed system requires authentication to access resources assigned to
a particular group. You can enable or disable individual rights to resources.
Username
Default
Password
Group Privileges
operator tapelabs Operations Can view system status, including
vaults.
tapelabs tapelabs Supervisor Can perform all VTS functions but
cannot administer access control, edit
the VTS configuration file, restore the
Linux configuration, or view and
manage configurations.
admin virtual Administration Can access all VTS functions