HP StorageWorks 2/16 - SAN Switch Manual page 141

1. Log in to the server and change directory to the RADIUS configuration file directory.
2. Use a text editor to create a vendor dictionary file called dictionary.hp and enter the
3. Save dictionary.hp.
4. Open the dictionary file in a text editor and add this line:
5. Save the dictionary file.
6. Open the client.config file in a text editor and add the switches that are to be
7. Save client.config.
8. Open the user file in a text editor and add user names and roles for users who will be
9. Save the user file.
10. Enter the following command to start the RADIUS server:
11. Log in to a client switch and issue the aaaconfig command to configure it as a client
12. Log out.
When you log in to the switch again, RADIUS service is in force.
Fabric OS 3.x Document Addendum
Test the configuration.
Typically, this directory is located at /usr/local/etc/raddb.
following lines into the file:
#
# dictionary.hp
#
VENDOR HP
#
# attributes
#
ATTRIBUTE HP-Auth-Role
$INCLUDE dictionary.hp
configured as RADIUS clients. For example, to configure the switch at IP address
10.32.170.59 as a client:
client 10.32.170.59
secret = Secret
shortname = Testing Switch
nastype = other
In this example, the switch name is Testing Switch and its shared secret is Secret.
Make sure that the shared secret matches that configured on the switch (see
RADIUS Server").
accessing the switch. For example, to set up an account called JohnDoe with the admin
role:
JohnDoe Auth-Type := Local, User-Password == "johnPassword"
HP-Auth-Role = "admin"
/usr/local/sbin/radiusd
and enable RADIUS service, as described in
and Disabling RADIUS Service."
1588
1 string HP
"Adding a RADIUS Server"
Fabric OS procedures user guide
"Adding a
and "Enabling
141