Adding The Brocade Attribute To The Server; Creating The User - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Adding the Brocade attribute to the server

Create and save the file $PREFIX/etc/raddb/dictionary.brocade with the following information:
1.
#
# dictionary.brocade
#
VENDOR Brocade 1588
#
# attributes
#
ATTRIBUTE
ATTRIBUTE
ATTRIBUTE
ATTRIBUTE
ATTRIBUTE
ATTRIBUTE
ATTRIBUTE
This defines the Brocade vendor ID as 1588, the Brocade attribute 1 as Brocade-Auth-Role and 6 as
Brocade-Passwd-ExpiryDate, both are string values. The Brocade attribute 7 as
Brocade-Passwd-WarnPeriod, and it is an integer value.
2. Open the file $PREFIX/etc/raddb/dictionary in a text editor and add the line:
$INCLUDE dictionary.brocade
The file dictionary.brocade is located in the RADIUS configuration directory and loaded for use by the
RADIUS server.

Creating the user

• Open the $PREFIX/etc/raddb/user file in a text editor and add user names and roles for users who will
be accessing the switch and authenticating RADIUS.
The user will log in using the role specified with Brocade-Auth-Role. The valid roles include Root, Admin,
SwitchAdmin, ZoneAdmin, SecurityAdmin, BasicSwitchAdmin, FabricAdmin, Operator, and User. You
must use quotation marks around "password" and "role."
For example, to set up an account called JohnDoe with the Admin role with a password expiry date of
May 28, 2008 and a warning period of 30 days:
JohnDoe Auth-Type := Local
User-Password == "johnPassword",
Brocade-Auth-Role = "admin",
Brocade-Auth-Role = "admin",
Brocade-Passwd-ExpiryDate = "05/28/08",
Brocade-Passwd-WarnPeriod = 30
The next example uses the local system password file to authenticate users.
swadmin Auth-Type := System
When you use network information service (NIS) for authentication, the only way to enable
authentication with the password file is to force the B-Series switch to authenticate using password
authentication protocol (PAP, which requires the -a pap option with the aaaConfig command).
Brocade-Auth-Role
Brocade-AVPairs1
Brocade-AVPairs2
Brocade-AVPairs3
Brocade-AVPairs4
Brocade-Passwd-ExpiryDate
Brocade-Passwd-WarnPeriod
Brocade-Auth-Role = "admin",
Brocade-AVPairs1 = "HomeLF=70",
Brocade-AVPairs2 = "LFRoleList=admin:2,4-8,70,80,128",
Brocade-AVPairs3 = "ChassisRole=switchadmin",
Brocade-Passwd-ExpiryDate = "11/10/2008",
Brocade-Passwd-WarnPeriod = "30"
1 string Brocade
2 string Brocade
3 string Brocade
4 string Brocade
5 string Brocade
6 string Brocade
7 string Brocade
Fabric OS 6.2 administrator guide 89