Fabric OS 5.2.x administrator guide
55
3
Managing user accounts
This chapter provides information and procedures on managing authentication and user accounts.
Overview
Fabric OS provides two options for authenticating users—remote RADIUS services and/or the local switch
user database. Both options allow users to be centrally managed using the following methods:
•
Local user database
: Manually synchronize the local user database using the distribute command
to push a copy of the switch’s local user database to all other Fabric OS 5.2.x and higher switches in
the fabric.
•
Remote RADIUS servers
: Users are managed in a remote RADIUS server, all switches in the fabric
can be configured to authenticate against the centralized remote database.
Accessing the management channel
The total number of sessions on a switch may not exceed 32.
Table 8
shows the number of simultaneous
login sessions allowed for each role.
Using role-based access control (RBAC)
Fabric OS 5.2.x uses Role-Based Access Control (RBAC) to determine which commands a user can run.
Assign one of the Fabric OS predefined roles to a user, as shown in
Table 9
.
Table 8
Maximum number of simultaneous sessions
Role name
Maximum sessions
User
4
Operator
4
SwitchAdmin
4
ZoneAdmin
4
FabricAdmin
4
BasicSwitchAdmin
4
Admin
2
Table 9
Fabric OS 5.2.x roles
Role name
Version
Duties
Description
Admin
All
All administration
All administrative commands.
SwitchAdmin
5.0.x and higher
Local switch
administration
Most switch (local) commands,
excludes security, user management,
and zoning commands.
Operator
5.2x0 and higher
General switch
administration
Routine switch maintenance
commands.
ZoneAdmin
5.2.x and higher
Zone administration
Zone management commands only.
FabricAdmin
5.2.x and higher
Fabric and switch
administration
All switch and fabric commands,
excludes user management and
Administrative Domains commands.
BasicSwitchAdm
in
5.2.x and higher
Restricted switch
administration
Mostly monitoring with limited
switch (local) commands.
User
All
Monitoring only
Nonadministrative use, such as
monitoring system activity.
Summary of Contents for AE370A - Brocade 4Gb SAN Switch 4/12
Page 18: ...18 ...
Page 82: ...82 Managing user accounts ...
Page 102: ...102 Configuring standard security features ...
Page 126: ...126 Maintaining configurations ...
Page 198: ...198 Routing traffic ...
Page 238: ...238 Using the FC FC routing service ...
Page 260: ...260 Administering FICON fabrics ...
Page 280: ...280 Working with diagnostic features ...
Page 332: ...332 Administering Extended Fabrics ...
Page 414: ...398 Configuring the PID format ...
Page 420: ...404 Configuring interoperability mode ...
Page 426: ...410 Understanding legacy password behaviour ...
Page 442: ...426 ...
Page 444: ......
Page 447: ......