HP StorageWorks 8/80 HP StorageWorks Fabric OS 6.1.x administrator guide (5697 - Page 162

Activating and deactivating Admin Domains

Page 162 highlights

• Adding an Admin Domain list, home Admin Domain, and role to a user configuration is backward compatible with pre-Fabric OS 5.2.0 firmware. When you downgrade to pre-Fabric OS 5.2.0 firmware, the userConfig command records are interpreted using legacy logic. To create a new user account for managing Admin Domains: 1. Connect to the switch and log in as admin. 2. Enter the userconfig --add command using the -r option to set the role, the -a option to provide access to Admin Domains, and the -h option to specify the home Admin Domain. userconfig --add username -r role -h home_AD -a "AD_list" where username is the name of the account, role is the user account role, home_AD is the home Admin Domain, and AD_list is the list of Admin Domains to which the user account will have access. The following example creates new user account ad1admin with an admin role and assigns one Admin Domain, blue_ad1, to it. This example also assigns blue_ad1 as the user's home Admin Domain. sw5:admin> userconfig --add ad1admin -r admin -h blue_ad1 -a "blue_ad1" The following example creates new user account ad2admin with an admin role, access to Admin Domains 1 and 2, and home Admin Domain set to 2. sw5:admin> userconfig --add ad2admin -r admin -h 2 -a "1,2" To assign Admin Domains to an existing user account: 1. Connect to the switch and log in as admin. 2. Enter the userConfig --addad command using the -a option to provide access to Admin Domains and the -h option to specify the home Admin Domain. userconfig --addad username -h home_AD -a "AD_list" where username is the name of the account, home_AD is the home Admin Domain, and AD_list is the list of Admin Domains to which the user account will have access. The following example assigns Admin Domain green_ad2 to the existing user account ad1admin. sw5:admin> userconfig --addad ad1admin -r admin -a "green_ad2" To create a new physical fabric administrator user account: 1. Connect to the switch and log in as admin. 2. Enter the userconfig --add command using the -r option to set the role to admin and the -a option to provide access to Admin Domains 0 through 255. userconfig --add username -r admin -h home_AD -a "0-255" where username is the name of the account and home_AD is the home Admin Domain. The following example creates new user account pf_admin1 with an admin role, access to all Admin Domains (AD0 through AD255), and home Admin Domain set to 255. This user account is now a physical fabric administrator. sw5:admin> userconfig --add pf_admin1 -r admin -h 255 -a "0-255" Activating and deactivating Admin Domains An Admin Domain can be in either an active or inactive state. When you create an Admin Domain, it is automatically in the active state. If you deactivate an Admin Domain, the members assigned to the Admin Domain can no longer access their hosts or storage unless those members are part of another Admin Domain. You cannot log in to an Admin Domain that has been deactivated. You must activate an Admin Domain before you can log in to it. To activate an Admin Domain: 1. Connect to the switch and log in as admin. 2. Switch to the AD255 context, if you are not already in that context. ad --select 255 162 Managing administrative domains

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457
  • 458
  • 459
  • 460
  • 461
  • 462
  • 463
  • 464
  • 465
  • 466
  • 467
  • 468
  • 469
  • 470
  • 471
  • 472
  • 473
  • 474
  • 475
  • 476
  • 477
  • 478
  • 479
  • 480
  • 481
  • 482
  • 483
  • 484
  • 485
  • 486
  • 487
  • 488
  • 489
  • 490
  • 491
  • 492

162
Managing administrative domains
Adding an Admin Domain list, home Admin Domain, and role to a user configuration is backward
compatible with pre-Fabric OS 5.2.0 firmware. When you downgrade to pre-Fabric OS 5.2.0
firmware, the
userConfig
command records are interpreted using legacy logic.
To create a new user account for managing Admin Domains:
1.
Connect to the switch and log in as admin.
2.
Enter the
userconfig
--
add
command using the
-r
option to set the role, the
-a
option to provide
access to Admin Domains, and the
-h
option to specify the home Admin Domain.
userconfig --add
username
-r
role
-h
home_AD
-a "
AD_list
"
where
username
is the name of the account,
role
is the user account role,
home_AD
is the home Admin
Domain, and
AD_list
is the list of Admin Domains to which the user account will have access.
The following example creates new user account ad1admin with an admin role and assigns one Admin
Domain, blue_ad1, to it. This example also assigns blue_ad1 as the user’s home Admin Domain.
sw5:admin> userconfig --add ad1admin -r admin -h blue_ad1 -a "blue_ad1"
The following example creates new user account ad2admin with an admin role, access to Admin
Domains 1 and 2, and home Admin Domain set to 2.
sw5:admin> userconfig --add ad2admin -r admin -h 2 -a "1,2"
To assign Admin Domains to an existing user account:
1.
Connect to the switch and log in as admin.
2.
Enter the
userConfig
--
addad
command using the
-a
option to provide access to Admin Domains
and the
-h
option to specify the home Admin Domain.
userconfig --addad
username
-h
home_AD
-a
"
AD_list
"
where
username
is the name of the account,
home_AD
is the home Admin Domain, and
AD_list
is the
list of Admin Domains to which the user account will have access.
The following example assigns Admin Domain green_ad2 to the existing user account ad1admin.
sw5:admin> userconfig --addad ad1admin -r admin -a "green_ad2"
To create a new physical fabric administrator user account:
1.
Connect to the switch and log in as admin.
2.
Enter the
userconfig
--
add
command using the
-r
option to set the role to admin and the
-a
option to provide access to Admin Domains 0 through 255.
userconfig --add
username
-r
admin
-h
home_AD
-a
"
0-255
"
where
username
is the name of the account and
home_AD
is the home Admin Domain.
The following example creates new user account pf_admin1 with an admin role, access to all Admin
Domains (AD0 through AD255), and home Admin Domain set to 255. This user account is now a
physical fabric administrator.
sw5:admin> userconfig --add pf_admin1 -r admin -h 255 -a "0-255"
Activating and deactivating Admin Domains
An Admin Domain can be in either an active or inactive state. When you create an Admin Domain, it is
automatically in the active state.
If you deactivate an Admin Domain, the members assigned to the Admin Domain can no longer access
their hosts or storage unless those members are part of another Admin Domain.
You cannot log in to an Admin Domain that has been deactivated. You must activate an Admin Domain
before you can log in to it.
To activate an Admin Domain:
1.
Connect to the switch and log in as admin.
2.
Switch to the AD255 context, if you are not already in that context.
ad --select 255