HP ProCurve 2510G Series Manual page 126

RADIUS Authentication, Authorization and Accounting
Commands Authorization
5-20
The results of using the HP-Command-String and HP-Command-Exception
attributes in various combinations are shown below.
HP-Command-String HP-Command-Exception
Not present Not present
Not present DenyList-PermitOthers(1)
Not present PermitList-DenyOthers(0)
Commands List DenyList-PermitOthers(1)
Commands List PermitList-DenyOthers(0)
Commands List Not present
Empty Commands Not present
List
Empty Commands DenyList-PermitOthers(1)
List
Empty Commands PermitList-DenyOthers(0)
List
You must configure the RADIUS server to provide support for the HP VSAs.
There are multiple RADIUS server applications; the two examples below show
how a dictionary file can be created to define the VSAs for that RADIUS server
application.
Description
If command authorization is enabled
and the RADIUS server does not
provide any authorization attributes in
an Access-Accept packet, the user is
denied access to the server. This
message appears: "Access denied: no
user's authorization info supplied by
the RADIUS server."
Authenticated user is allowed to
execute all commands available on
the switch.
Authenticated user can only execute
a minimal set of commands (those that
are available by default to any user).
Authenticated user may execute all
commands except those in the
Commands list.
Authenticated user can execute only
those commands provided in the
Commands List, plus the default
commands.
Authenticated user can only execute
commands from the Commands List,
plus the default commands.
Authenticate user can only execute a
minimal set of commands (those that
are available by default to any user).
Authenticated user is allowed to
execute all commands available on
the switch.
Authenticate user can only execute a
minimal set of commands (those that
are available by default to any user).