User ID
A string to identify a specific user
User password
A password for each user ID
Groups
Strings to identify one or more groups of users. The TS3500 Tape Library maps each
LDAP group to a TS3500 Tape Library role.
Each user is defined as a member of one or more groups, meaning the user assumes the
roles defined by those groups.
Notes:
•
The User ID and User password cannot exceed 15 characters. LDAP users that
exceed this maximum may not be able to authenticate to the TS3500 Tape Library
Specialist Web interface when SAS is enabled.
•
The maximum length of a Group is 15 characters. Groups exceeding 15 characters in
length will not map to a defined role in the TS3500 Tape Library.
Mapping groups to roles
When a user is successfully authenticated using the Storage Authentication Service, the
resulting user information includes a list of groups the user belongs to. For successful
authorization, at least one LDAP group in the list must have the same name as a role that is
defined in the TS3500 Tape Library. The first LDAP group to match a role determines the
role of the user. Avoid ambiguity of multiple matches by making sure that only one group
matches a role in the TS3500 Tape Library.
Note:
Prior to firmware level A040, a user in an Admin LDAP group is required to enable
and disable SAS.
For more information about the Tivoli Storage Productivity Center, visit the Web at
http://www-03.ibm.com/systems/storage/software/center/index.html
Parent topic:
IPv6 functionality
This topic describes IPv6.
