McDATA Enterprise Operating System, User Manual

Page: 90 / 328

2
2-46
Enterprise Operating System Command Line Interface User Manual
config
Command Example
Root> config security authentication switch setSecret
config.security.authentication.user
One of the fundamental concepts of the authentication portion of the
Command Line Interface is that all secured interfaces have
interchangeable users that are stored in a single local authentication
user database. In the past, CLI has supported authorization for only
two username/password pairs (one Administrator-level and another
Operator-level). These two username/password pairs were also
unique to CLI interface. With this release, a CLI user can now
configure multiple users for his own interface, as well as for other
management entities and FC connections. For this reason, the
security.userrights branch of commands has been removed from the
command tree.
config.security.authentication.user.add
Syntax
add username interface1 [interface2]
Purpose
This command adds a new user to the local authentication database.
Each user can be assigned a combination of interfaces that will
authenticate the new username/password combination. After
executing this command, the user will be moved to a new password
prompt where the user will enter a password; the password must
then be confirmed in next prompt. After confirming the new
password, the user will be returned to the initial prompt. No
characters will be echoed back to the screen when entering a
password, or when confirming a password.
All new users will be assigned a role of “none”; a subsequent “role”
command must be executed to assign a role. Web and CLI users must
be assigned a role before they can access the CLI or Web interfaces.
NOTE: The SANtegrity Authentication feature key must be installed to
configure E port and N port usernames.
Parameters This command has two required parameters, and an additional
password parameter at the prompt after the command.