某局点S1850V2web界面登录显示异常的经验案例

使用默认地址和账号登录设备页面正常，后续更改了管理地址和登录账号及密码，再次登录时web界面无法正常显示，如下：

1，更换浏览器或者清空缓存测试结果一样

2，新建账号提示有如下权限的用户

[H3C-luser-test]authorization-attribute user-role ?

  guest           Specify the local user to act as a guest

  guest-manager   Specify the local user to act as a guest manager

  security-audit  Specify the local user to act as a security auditor

配置这三种权限的用户登录后故障依旧，web都无法正常显示

local-user admin

 password cipher $c$3$XJHk4tQePMTbC6Z8BICNJzuSZJvDKDjvtYNWFI7rFg==

 authorization-attribute level 3

 authorization-attribute user-role security-audit

 service-type web

local-user test

 authorization-attribute level 3

 authorization-attribute user-role guest-manager

 service-type web

local-user test2

 authorization-attribute level 3

 authorization-attribute user-role guest

 service-type web

3，查看测试时的日志信息有登录成功的记录

%Apr 26 13:29:42:166 2000 H3C SC/6/SC_AAA_LAUNCH: -AAAType=AUTHEN-AAAScheme= local-Service=login-UserName=admin@system; AAA launched.

%Apr 26 13:29:42:166 2000 H3C SC/6/SC_AAA_SUCCESS: -AAAType=AUTHEN-AAAScheme= local-Service=login-UserName=admin@system; AAA is successful.

%Apr 26 13:29:42:167 2000 H3C SC/6/SC_AAA_LAUNCH: -AAAType=AUTHOR-AAAScheme= local-Service=login-UserName=admin@system; AAA launched.

%Apr 26 13:29:42:167 2000 H3C SC/6/SC_AAA_SUCCESS: -AAAType=AUTHOR-AAAScheme= local-Service=login-UserName=admin@system; AAA is successful.

%Apr 26 13:29:42:168 2000 H3C SC/6/SC_AAA_LAUNCH: -AAAType=ACCOUNT-AAAScheme= local-Service=login-UserName=admin@system; AAA launched.

%Apr 26 13:29:42:168 2000 H3C SC/6/SC_AAA_SUCCESS: -AAAType=ACCOUNT-AAAScheme= local-Service=login-UserName=admin@system; AAA is successful.

经过确认，此现象跟admin用户角色配置有关系；配置的admin本地用户为安全日志管理员，只有保存日志等权限；新建账号不需要单独配置authorization-attribute权限，默认就是管理员，删除此配置后问题解决 authorization-attribute user-role X

security-audit表示授权本地用户为安全日志管理员，该类型的本地用户通过认证后，仅能执行与安全日志文件操作相关的命令，比如保存安全日志文件等。