Explains how user IDs are generated and managed for Linux shell access on the APIC.
A user ID in the APIC bash shell is a numerical identifier that
-
is generated within the APIC for local users
-
can be specified in the cisco-av-pair for users with external authentication credentials
-
enables standard Linux permissions enforcement during bash sessions, and
-
marks all managed objects created by a user as created-by that user's Linux user ID.
User ID assignment details
For users whose authentication credential is managed on external servers, the user ID for the Linux shell can be specified in the cisco-av-pair. Omitting the (16001) in the cisco-av-pair is legal, in which case the remote user gets a default Linux user ID of 23999.
User ID display in bash shell
This example shows a user ID as seen in the APIC bash shell:
admin@ifav17-ifc1:~> touch myfile
admin@ifav17-ifc1:~> ls -l myfile
-rw-rw-r-- 1 admin admin 0 Apr 13 21:43 myfile
admin@ifav17-ifc1:~> ls -ln myfile
-rw-rw-r-- 1 15374 15374 0 Apr 13 21:43 myfile
admin@ifav17-ifc1:~> id
uid=15374(admin) gid=15374(admin) groups=15374(admin)