User Accounts

User accounts provide one way for users to access the Services Router. Users can access the device without accounts if you configured RADIUS or TACACS+ servers, as described in Managing User Authentication with Quick Configuration and Managing User Authentication with a Configuration Editor. After you have created an account, the device creates a home directory for the user. An account for the user root is always present in the configuration. For information about configuring the password for the user root, see the JUNOS Software Administration Guide. For each user account, you can define the following:

• Username—Name that identifies the user. It must be unique within the device. Do not include spaces, colons, or commas in the username.
• User's full name—If the full name contains spaces, enclose it in quotation marks (“ ”). Do not include colons or commas.
• User identifier (UID)—Numeric identifier that is associated with the user account name. The identifier must be in the range 100 through 64000 and must be unique within the device. If you do not assign a UID to a username, the software assigns one when you commit the configuration, preferring the lowest available number.
• User's access privilege—You can create login classes with specific permission bits or use one of the default classes listed in Table 35.
• Authentication method or methods and passwords that the user can use to access the device—You can use SSH or an MD5 password, or you can enter a plain-text password that JUNOS software with enhanced services encrypts using MD5-style encryption before entering it in the password database. If you configure the plain-text-password option, you are prompted to enter and confirm the password.