Table 16 Ldap Options; Table 17 Authentication Configuration Options - HP StoreFabric SN6500B Administrator's Manual

Supported LDAP options
Table 16
TABLE 16
Protocol
LDAPv3
LDAPv3 with TLS
extension
LDAPv3 with TLS
and Certificate
LDAPv2 with SSL
1.
Command options
Table 17
TABLE 17
aaaConfig options
--authspec "local"
--authspec "radius"
--authspec "radius;local"
--authspec "radius;local" --backup
--authspec "ldap"
Fabric OS Administrator's Guide
53-1002745-02
summarizes the various LDAP options and Brocade support for each.
LDAP options
Description
LDAP over TCP
LDAPv3 over TLS
LDAPv3 over TLS channel and
authenticated using a certificate
1
LDAPv2 over SSL. Port 636 is used for
SSL. Port 389 is for connecting to
LDAP.
This protocol was deprecated in 2003 when LDAPv3 was standardized.
outlines the aaaConfig command options used to set the authentication mode.
Authentication configuration options
Channel type Default port
Unsecured
Secured
Secured
Secured
Description
Default setting. Authenticates management
connections against the local database only.
If the password does not match or the user is
not defined, the login fails.
Authenticates management connections
against any RADIUS databases only.
If the RADIUS service is not available or the
credentials do not match, the login fails.
Authenticates management connections
against any RADIUS databases first.
If RADIUS fails for any reason, authenticates
against the local user database.
Authenticates management connections
against any RADIUS databases. If RADIUS fails
because the service is not available, it then
authenticates against the local user database.
The --backup option directs the service to try
the secondary authentication database only if
the primary authentication database is not
available.
Authenticates management connections
against any LDAP databases only. If LDAP
service is not available or the credentials do
not match, the login fails.
Remote authentication
URL
389 ldap://
389 ldap://
389 ldap://
636 and 389 ldaps://
Equivalent setting in
Fabric OS v5.1.0 and
earlier
--radius --switchdb
Off On
On Off
not not
supported supported
On On
n/a n/a
5
Brocade
supported?
No
Yes
Yes
No
1
151