Create New Local Users for Remote Authentication
To create a new user without a password which causes them to fail back to remote authentication:
-
Select SETTINGS > USER MANAGEMENT > Remote Authentication
-
Choose a remote AuthenticationScheme and enter appropriate settings.
-
Click Apply.
-
Select SETTINGS > USER MANAGEMENT > Local Users
-
Click the + button. The New User dialog loads.
-
Enter a Username and Description.
-
Select the Remote Password Only checkbox.The Remote Password Only checkbox only displays if you set up the Scheme correctly in Step 2.
-
Select the Enabled checkbox. The Password and Confirm Password fields are disabled.
-
Select the Remote Password Only checkbox. The Password and Confirm Password fields are disabled.
-
Click Save User.
Note:When a new user is created, an entry is added to the syslog, indicating the new user's name, the user that performed the operation, database queries, and the time that it occurred:
2020-05-22T16:22:46.490627+01:00 localhost rest_api_log[62]: GET 200 (root | 192.168.1.230) - /api/v3.5/users?page=1&per_page=10 RESPONSE={'users': [{'username': 'root', 'description': 'System wide SuperUser account', 'enabled': True, 'id': 'users-1', 'no_password': False, 'expired': False, 'locked_out': False, 'rights': {'delete': True, 'modify': True}, 'groups': ['groups-2']}, {'username': 'fred', 'description': 'fred', 'enabled': True, 'id': 'users-2', 'no_password': False, 'expired': False, 'locked_out': False, 'rights': {'delete': True, 'modify': True}, 'groups': ['groups-2']}], 'meta': {'total_pages': 1}}
If the created user is set to disabled, the configurator_users
message does not appear as they have not been added to the passwords file.
The syslog can be accessed from Lighthouse by clicking Help > Technical Support Report.