authorization-scheme (AAA domain view)

Function

The authorization-scheme command sets the authorization scheme of the current domain.

The undo authorization-scheme command restores the default setting.

By default, no authorization scheme is used for the domain.

Format

authorization-scheme authorization-scheme-name

undo authorization-scheme

Parameters

Parameter	Description	Value
authorization-scheme-name	Specifies the name of an authorization scheme.	The value is a string of 1 to 32 case-insensitive characters. The name of an authorization scheme must comply with the naming criterion of Windows, that is, characters such as \, /, :, *, ?, ", <, >, and \| must be excluded from the name of an authorization scheme.

Parameter

Description

Value

authorization-scheme-name

Specifies the name of an authorization scheme.

The value is a string of 1 to 32 case-insensitive characters. The name of an authorization scheme must comply with the naming criterion of Windows, that is, characters such as \, /, :, *, ?, ", <, >, and | must be excluded from the name of an authorization scheme.

Views

AAA domain view

Default Level

3: Management level

Task Name and Operations

Task Name	Operations
aaa	write

Usage Guidelines

Usage Scenario

All the authorization of access users is implemented through authorization schemes in the domain view. You need to configure authorization schemes in the AAA view. Then, you can run the authorization-scheme command in the domain view to associate the domain with a particular authorization scheme. In this manner, the domain can use the authorization scheme for user authorization.

Before using the authorization-scheme command, you must create an authorization scheme.

Example

# Set the authorization scheme of the current domain to test.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] authorization-scheme test
[*HUAWEI-aaa-author-test] quit
[*HUAWEI-aaa] domain Huawei
[*HUAWEI-aaa-domain-huawei] authorization-scheme test