86 Managing user accounts
Fabric OS users on the RADIUS server
All existing Fabric OS mechanisms for managing local switch user accounts and passwords remain
functional when the switch is configured to use RADIUS. Changes made to the local switch database do
not propagate to the RADIUS server, nor do the changes affect any account on the RADIUS server.
Windows 2000 IAS
For example, to configure a Windows 2000 internet authentication service (IAS) server to use VSA to pass
the Admin role to the switch in the dial-in profile, the configuration specifies the Vendor code (1588),
Vendor-assigned attribute number (1), and attribute value (admin), as shown in Figure 1.
Figure 1 Windows 2000 VSA configuration
Linux FreeRadius server
For the configuration on a Linux FreeRadius server, define the following in a vendor dictionary file called
dictionary.brocade. Include the values outlined in Table 15.
Vendor length 2 or higher 1 octet, calculated by server, including vendor-type and vendor-length
Attribute-specific
data
ASCII
string
Multiple octets, maximum 253, indicating the name of the assigned
role and other supported attribute values such as Admin Domain
member list.
Table 14 Syntax for VSA-based account roles (continued)
Item Value Description
Table 15 Dictionary.brocade file entries
Include Key Value
VENDOR Brocade 1588
ATTRIBUTE Brocade-Auth-Role 1 string Brocade
Brocade-AVPairs1, 2, 3, 4 2, 3, 4, 5 string
Admin Domain or Virtual Fabric
member list
Brocade-Passwd-ExpiryDate 6 string MM/DD/YYYY in UTC
Brocade-Passwd-WarnPeriod 7 integer in days
To Next Page
Loading...
Need help?
General