Managing User Accounts; In This Chapter; User Accounts Overview - HP SN3000B Administrator's Manual

Managing User Accounts

In this chapter

User accounts overview

In addition to the default permissions assigned to the following roles: root, factory, admin, and user,
Fabric OS supports up to 252 additional user accounts on the chassis. These accounts expand
your ability to track account access and audit administrative activities.
Each user account is associated with the following:
•
•
•
•
•
•
•
NOTE
Admin Domains are mutually exclusive from Virtual Fabrics permissions when setting up user
accounts. You will need to set up different user accounts for each feature.
You cannot have Admin Domain mode and Virtual Fabrics mode enabled at the same time.
For more information about Admin Domains, refer to
Domains".
For more information about Virtual Fabrics, refer to
Fabric OS Administrator's Guide
53-1002446-01
•
User accounts overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
•
Local database user accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
•
Local account database distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
•
Password policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
•
The boot PROM password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
•
The authentication model using RADIUS and LDAP . . . . . . . . . . . . . . . . . . . 97
Admin Domain list — Specifies the Administrative Domains a user account is allowed to log in
to.
Home Admin Domain — Specifies the Admin Domain that the user is logged in to by default.
The home Admin Domain must be a member of the user's Admin Domain list.
Permissions — Associate roles with each user account to determine the functional access
levels within the bounds of the your current Admin Domain.
Virtual Fabric list — Specifies the Virtual Fabric a user account is allowed to log in to.
Home Virtual Fabric — Specifies the Virtual Fabric that the user is logged in to, if available. The
home Virtual Fabric must be a member of the user's Virtual Fabric list. If the fabric ID is not
available, the next lower valid fabric ID is used.
LF Permission List — Determines functional access levels within the bounds of the user's
Virtual Fabrics.
Chassis role — Similar to switch-level roles, but applies to a different subset of commands.
Chapter 17, "Managing Administrative
Chapter 10, "Managing Virtual
Chapter
5
Fabrics".
81