Configuring local users by using the command line

You can configure local users by using the command interface.

About this task

To configure an appliance user from the command line, you enter user configuration mode, specifying the name of the user that you want to configure, and enter the required user configuration commands.

Note: If you use messaging users and groups on the appliance for authentication records in an HA queue manager, you must set up the same messaging users and groups on all appliances in the HA group. The users and groups are not automatically replicated between the appliances.

Procedure

Connect to the IBM® MQ Appliance as described in Command line access. Log in as an administrative user.
Type config to enter global configuration mode.
Type the following command to configure a local user:
```
user name
```
Where name identifies the user that you want to configure. If you are creating a new user, name can contain up to 128 characters. The following characters are valid:
- a through z
- A through Z
- 0 through 9
- Underscore (_)
- Dash (-)
- Period (.) (note that a name that consists of a single period, or including two periods together, is not permitted)
Specify a password for the user:
```
password password
```
Set the user level of the account:
```
access-level level
```
Where level is group-defined to specify privileges according to group, or privileged to define a user with all privileges (that is, and administrative user).
Specify the group that the user belongs to, if required:
```
group groupName
```
Optionally, specify SNMPv3 credentials for the user:
```
snmp-cred engine-ID authentication-protocol authentication-secret-type authentication-secret privacy-protocol privacy-secret-type privacy-secret
```
Where:
engine-ID

This ID is set to 0 to identify the local engine.

authentication-protocol

Specify none to use no authentication key, md5 to use HMAC-MD5-96 as the authentication protocol, or sha to use HMAC-SHA-96 as the authentication protocol.

authentication-secret-type

Enter password to specify that the authentication secret is a password that is converted to an intermediate key with a standardized algorithm. Enter key to specify a fully localized key. This parameter is not required if you have set authentication-protocol to none.

authentication-secret
Specifies the secret, or key, for authentication for this account.
- If a password, specify a plaintext password that is at least 8 characters long.
- If a key and HMAC-MD5 are the authentication protocol, specify the hex representation of a 16-byte key.
- If a key and HMAC-SHA-96 are the authentication protocol, specify the hex representation of a 20-byte key.
This parameter is not required if you have set authentication-protocol to none.
privacy-protocol

Identifies which privacy (encryption) protocol to use. Set to none to not encrypt data. Set to des to use CBC-DES (this setting is the default). Set to aes to use CFB128-AES-128.

privacy-secret-type

Enter password to specify that the privacy secret is a password that is converted to an intermediate key with a standardized algorithm. Enter key to specify a fully localized key.

privacy-secret
Specifies the secret, or key, for privacy (encryption) for this account. This parameter is required when the privacy protocol is des or aes.
- If a password, specify a plain text password that is at least 8 characters long.
- If a key, and HMAC-MD5 is the authentication protocol, specify the hex representation of a 16-byte key.
- If a key, and HMAC-SHA-96 is the authentication protocol, specify the hex representation of a 20-byte key.
After you configure the user, enter exit to save the configuration and exit, or type cancel to exit without saving.