Fujitsu ETERNUS DX S5 Series Design Manual page 91

2. Basic Functions
User Access Management
User roles are specified in the Vendor Specific Attribute (VSA) of the Access-Accept response from the
server. The following table shows the syntax of the VSA based account role on the RADIUS server.
Item
Type
Length
Vendor-Id
Vendor type
Vendor length
Attribute-Specific
*1: The server-side role names must be identical to the role names of the ETERNUS DX. Match the letter case when entering the role
names.
[Example] RoleName0
Caution
• If RADIUS authentication fails when "Do not use Internal Authentication" has been selected for
"Authentication Error Recovery" on ETERNUS Web GUI, ETERNUS CLI, or SMI-S, logging on to ETERNUS
Web GUI or ETERNUS CLI will not be available.
When the setting to use Internal Authentication for errors caused by network problems is
configured, Internal Authentication is performed if RADIUS authentication fails on both primary and
secondary RADIUS servers, or at least one of these failures is due to network error.
• So long as there is no RADIUS authentication response the ETERNUS DX will keep retrying to
authenticate the user for the entire "Retry Time Out" period set on the "Modify RADIUS" function. If
authentication does not succeed before the "Retry Time Out" period expires, RADIUS authentication
is considered to be a failure.
• When using RADIUS authentication, if the role that is received from the server is unknown (not set)
for the ETERNUS DX, RADIUS authentication fails.
Size
Value
(octets)
1 26
1 7 or more
4 211
1 1
1 2 or more
1 or more ASCII characters One or more assignable role names for successfully
91
Description
Attribute number for the Vendor Specific Attribute
Attribute size (calculated by server)
Fujitsu Limited (SMI Private Enterprise Code)
Eternus-Auth-Role
Attribute size described after the "Vendor type"
item (calculated by server)
authenticated users (*1)
Design Guide