ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

When Disabling Telnet in Spectrum OneClick Privileges the SSH option is also disabled. Need SSH without Telnet as an option.

book

Article ID: 237289

calendar_today

Updated On:

Products

CA Spectrum DX NetOps

Issue/Introduction

Customer requires Telnet to be disabled on ALL devices.  Customer still wants the ability to SSH into a device.  The issue, when you Disable Telnet from the Privileges role of a User/User Group you also Disable the SSH option as well.

We need SSH as an option regardless of having Telnet disabled. 

Cause

Both the Telnet and SS functions are controlled by the same OneClick Privilege.

Environment

Release : Any

Component : Spectrum OneClick

Resolution

Edit the $SPECROOT/tomcat/webapps/spectrum/WEB-INF/topo/config/topo-app-config.xml and comment out or remove the privilege for SSH.

    <item name="com.aprisma.spectrum.app.topo.client.menu.SSH">
      <privilege>
        <name>telnet</name>
      </privilege>
      <toolbar-image>com/aprisma/spectrum/app/images/telnetSecure.png</toolbar-image>
      <toolbar-image-rollover>
        com/aprisma/spectrum/app/images/telnetSecureRollover.png
      </toolbar-image-rollover>

Additional Information

The default SPECROOT/tomcat/webapps/spectrum/WEB-INF/topo/config/topo-app-config.xml file must be edited for this to work. It sill not work by copying the topo-app-config.xml file to the $SPECROOT/custom/topo/config directory and then editing that file.

Since this is a modification to an out of the box default file an upgrade of Spectrum may overwrite this file.

Powered by Wolken Software