Brocade Communications Systems 53-1001763-02, Administrator'S Manual

Page: 123 / 586

Fabric OS Administrator’s Guide 83
53-1001763-02
Chapter
5
Managing User Accounts
In this chapter
•
User accounts overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
•
Local database user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
•
Local account database distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
•
Password policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
•
The boot PROM password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
•
The authentication model using RADIUS and LDAP . . . . . . . . . . . . . . . . . . . 99
User accounts overview
In addition to the default accounts—root, factory, admin, and user—Fabric OS supports up to 252
additional user-defined accounts in each logical switch (domain). These accounts expand your
ability to track account access and audit administrative activities.
Each user-defined account is associated with the following:
•
Admin Domain list — Specifies the Administrative Domains a user account is allowed to log in
to.
•
Home Admin Domain — Specifies the Admin Domain that the user is logged in to by default.
The home Admin Domain must be a member of the user’s Admin Domain list.
•
Role — Determines functional access levels within the bounds of the user’s current Admin
Domain.
•
Virtual Fabric list — Specifies the Virtual Fabric a user account is allowed to log in to.
•
Home Virtual Fabric — Specifies the Virtual Fabric that the user is logged in to by default. The
home Virtual Fabric must be a member of the user’s Virtual Fabric list.
•
LF Role List — Determines functional access levels within the bounds of the user’s Virtual
Fabrics.
NOTE
Admin Domains are mutually exclusive from Virtual Fabrics permissions when setting up user
accounts. You will need to set up different user accounts for each feature.
You cannot have Admin Domain mode and Virtual Fabrics mode enabled at the same time.
For more information about Admin Domains, refer to Chapter 15, “Managing Administrative
Domains” .
For more information about Virtual Fabrics, refer to refer to Chapter 10, “Managing Virtual Fabrics” .