Brocade Communications Systems 53-1001763-02 Administrator's Manual page 146

5
The authentication model using RADIUS and LDAP
2. Open the file $PREFIX/etc/raddb/dictionary in a text editor and add the line:
Creating the user
1. Open the $PREFIX/etc/raddb/user file in a text editor.
2. Add the user names and their roles for users accessing the switch and authenticating through
Example of adding a user name to the RADIUS authentication
Example of using the local system password to authenticate users
106
ATTRIBUTE Brocade-Auth-Role
ATTRIBUTE Brocade-AVPairs1
ATTRIBUTE Brocade-AVPairs2
ATTRIBUTE Brocade-AVPairs3
ATTRIBUTE Brocade-AVPairs4
ATTRIBUTE Brocade-Passwd-ExpiryDate
ATTRIBUTE Brocade-Passwd-WarnPeriod
This defines the Brocade vendor ID as 1588, the Brocade attribute 1 as Brocade-Auth-Role
and 6 as Brocade-Passwd-ExpiryDate, both are string values. The Brocade attribute 7 as
Brocade-Passwd-WarnPeriod, and it is an integer value.
$INCLUDE dictionary.brocade
As a result, the file dictionary.brocade is located in the RADIUS configuration directory and
loaded for use by the RADIUS server.
RADIUS.
The user will log in using the role specified with Brocade-Auth-Role. The valid roles include
Root, Admin, SwitchAdmin, ZoneAdmin, SecurityAdmin, BasicSwitchAdmin, FabricAdmin,
Operator and User. You must use quotation marks around "password" and "role".
For example, to set up an account called JohnDoe with the Admin role with a password expiry
date of May 28, 2008 and a warning period of 30 days:
JohnDoe Auth-Type := Local
User-Password == "johnPassword",
Brocade-Auth-Role = "admin",
Brocade-Auth-Role = "admin",
Brocade-Passwd-ExpiryDate = "05/28/08",
Brocade-Passwd-WarnPeriod = 30
The next example uses the local system password file to authenticate users.
swadmin
Auth-Type := System
Brocade-Auth-Role = "admin",
Brocade-AVPairs1 = "HomeLF=70",
Brocade-AVPairs2 = "LFRoleList=admin:2,4-8,70,80,128",
Brocade-AVPairs3 = "ChassisRole=switchadmin",
Brocade-Passwd-ExpiryDate = "11/10/2008",
Brocade-Passwd-WarnPeriod = "30"
When you use network information service (NIS) for authentication, the only way to enable
authentication with the password file is to force the Brocade switch to authenticate using
password authentication protocol (PAP); this requires the -a pap option with the aaaConfig
command.
1 string Brocade
2 string Brocade
3 string Brocade
4 string Brocade
5 string Brocade
6 string Brocade
7 string Brocade
Fabric OS Administrator's Guide
53-1001763-02