Dell EMC VxFlex Ready Node, User Manual

Page: 170 / 354

Procedure
1. Log in to VxFlex OS with the
accept_banner_by_scripts_only
parameter:
scli --login --username <USERNAME> --
accept_banner_by_scripts_only
where
<USERNAME> is the user running the script.
MDM and LDAP integration in an AMS managed system
VxFlex OS supports local domain user authentication, and LDAP domain
authentication. In addition, secure authentication is used between system internal and
external components. This chapter provides the CLI commands used to create and
manage VxFlex OS users. The REST API can also be used to configure LDAP. For
more information, see the operations for MDM clusters in the
VxFlex OS REST API
Reference Guide .
l
To set up local domain users, follow the instructions in this chapter.
l
To set up LDAP users, see a detailed explanation in the document VxFlex OS User
Roles and LDAP Technical Notes . In general, the following steps must be performed:
1. Add LDAP service to the MDM.
2. Create Active Directory (AD) groups that correspond to the user roles offered by
VxFlex OS.
3. Set the system-wide authentication method (use with caution, because it is
complex to roll-back this operation).
4. Log in again to apply the changes that you made.
User roles
The authorization permissions of each user role are defined differently for local
authentication, and for LDAP authentication. Although the role names are similar, the
permissions granted to them are not.
User roles defined in the LDAP domain are mutually exclusive, with no overlap—with
the exception of the Configurator role. If you want to give an LDAP user permission to
perform both monitoring and configuration roles, for example, assign that user to both
the Backend/Frontend Configurator and Monitor LDAP groups.
The Configurator and Super User roles do not exist at all for LDAP.
The following table describes the permissions that can be defined for local domain
users and for LDAP domain users.
Table 31 Local and LDAP user roles and permissions
User role Query Configure parameters
Configure user
credentials
Local LDAP Local LDAP Local LDAP
Monitor Yes Yes No No No No
Security Management
170 Dell EMC VxFlex Ready Node AMS User Guide