Linux; How To Add The Brocade Attribute To The Server; How To Create The User - HP AA979A - StorageWorks SAN Switch 2/8V Administrator's Manual

Linux

The following procedures work for FreeRADIUS on Solaris and Red Hat Linux. FreeRADIUS is a freeware
RADIUS server that you can find at:
www.freeradius.org
Follow the installation instructions at the web site. FreeRADIUS runs on Linux (all versions), FreeBSD,
NetBSD, and Solaris. If you make a change to any of the files used in this configuration, you must stop the
server and restart it for the changes to take effect.
FreeRADIUS installation places the configuration files in
/usr/local.
Configuring RADIUS service on Linux consists of the following tasks:
• Adding the Brocade attribute to the server
• Creating the user
• Enabling clients

How to add the Brocade attribute to the server

1. Create and save the file $PREFIX/etc/raddb/dictionary.brocade with the following
information:
#
# Brocade FabricOS v5.0.1 dictionary
#
VENDOR
#
# attribute 1 defined to be Brocade-Auth-Role
# string defined in user configuration
#
ATTRIBUTE Brocade-Auth-Role
This defines the Brocade vendor ID as 1588, the Brocade attribute 1 as Brocade-Auth-Role, and it is a
string value.
2. Open the file $PREFIX/etc/raddb/dictionary in a text editor and add the line:
$INCLUDE dictionary.brocade
As a result, the file
use by the RADIUS server.

How to create the user

1. Open the $PREFIX/etc/raddb/user file in a text editor and add user names and roles for users
who will be accessing the switch and authenticating RADIUS.
The user will log in using the role specified with Brocade-Auth-Role. The valid roles include Root,
Factory, Admin, SwitchAdmin, and User. The new roles appearing in 5.2.x are also valid. You must use
quotation marks around "password" and "role".
For example, to set up an account called JohnDoe with the Admin role:
JohnDoe Auth-Type := Local, User-Password == "johnPassword" Brocade-Auth-Role =
"admin"
The next example uses the local system password file to authenticate users.
JohnDoe Auth-Type := System, Brocade-Auth-Role = "admin"
When you use NIS for authentication, the only way to enable authentication with the password file is to
force the switch to authenticate using PAP; this requires the
command.
Brocade 1588
1
dictionary.brocade
$PREFIX/etc/raddb
string Brocade
is located in the RADIUS configuration directory., and loaded for
-a pap
. By default, the PREFIX is
option with the aaaConfig
Fabric OS 5.2.x administrator guide 71