Dell EqualLogic PS6210XS EqualLogic Host Integration Tools for Linux Version 1 - Page 59

Example 4: Creating a Group Access Record Without Specifying a Password, names for the group, but

Get Dell EqualLogic PS6210XS PDF manuals and user guides View all Dell EqualLogic PS6210XS manuals
Add to My Manuals
Save this manual to your list of manuals

Page 59 highlights

• Using multiple group access files • Inserting multiple user names into a group access file and selecting the user name for a given operation on the ASMCLI command line In this example, volume administrator user-admin is an administrator for several user volumes on PS Series group, eqlgroup1. That PS Series group has volumes used by the accounting applications. Those volumes are administered by volume administrator accnt-admin. The system administrator creates a group access record in the default group access file, /etc/equallogic/asm-group-access for user-admin to manage Smart Copies for the user volumes. The system administrator uses the default group access file for all ASMCLI operations for the user volumes, as follows: # asmcli create group-access --name eqlgroup1 --ip-address 192.x.x.xx --user-name user-admin Password for user-admin on eqlgroup1: # asmcli create smart-copy --source /user1 /user2 To manage the accounting application volumes, the system administrator creates a separate group access file for administrator accntadmin, as follows: # asmcli create group-access --name eqlgroup1 --ip-address 192.x.x.xx \--user-name accnt-admin --group-access ~/.asm-group-access-accnt Password for accnt-admin on eqlgroup1: # asmcli create smart-copy --source /acc-recv /acc-pay --group-access ~/.asm-group-access-accnt Alternatively, you can insert both sets of credentials into the same file and select which name to use on the ASMCLI command line. In this case, you use the --user-name option with the create smart-copy command, as follows: # asmcli create group-access --name eqlgroup1 --ip-address 192.x.x.xx --user-name user-admin Password for user-admin on eqlgroup1: # asmcli create group-access --name eqlgroup1 --user-name accnt-admin Password for accnt-admin on eqlgroup1: # asmcli create smart-copy --source /user1 /user2 --user-name user-admin # asmcli create smart-copy --source /accnt-recv --user-name accnt-admin NOTE: In the previous example, ASM/LE needs to connect to a PS Series group. If a group access file has multiple user names for the group, but the create smart-copy command does not include the --user-name option to select the user name to use, the command will fail. A unique identity is required to process the request. Example 4: Creating a Group Access Record Without Specifying a Password When you create a group access file and specify the --no-password option, ASMCLI does not store and encrypt a password in the group access file. In this example, the group access file for Group3 is created without storing a password. # asmcli list group-access Group Access Group name: Group1 IP address: 192.x.x.xx User names: user-voladmin Group name: Group2 IP address: 192.x.x.xy User names: user-voladmin 2 Groups defined. # asmcli create group-access --name Group3 --ip-address 192.x.x.xz --user-name user-voladmin --no-password Auto-Snapshot Manager Command Line Interface 59

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
•
Using multiple group access files
•
Inserting multiple user names into a group access file and selecting the user name for a given operation on the ASMCLI command line
In this example, volume administrator
user-admin
is an administrator for several user volumes on PS Series group, eqlgroup1. That PS
Series group has volumes used by the accounting applications. Those volumes are administered by volume administrator
accnt-admin
.
The system administrator creates a group access record in the default group access file,
/etc/equallogic/asm-group-access
for
user-admin
to manage Smart Copies for the user volumes. The system administrator uses the default group access file for all ASMCLI
operations for the user volumes, as follows:
# asmcli create group-access --name eqlgroup1 --ip-address
192.x.x.xx --user-name user-admin
Password for user-admin on eqlgroup1:
# asmcli create smart-copy --source /user1 /user2
To manage the accounting application volumes, the system administrator creates a separate group access file for administrator
accnt-
admin
, as follows:
# asmcli create group-access --name eqlgroup1 --ip-address
192.x.x.xx \--user-name accnt-admin --group-access
~/.asm-group-access-accnt
Password for accnt-admin on eqlgroup1:
# asmcli create smart-copy --source /acc-recv /acc-pay --group-access
~/.asm-group-access-accnt
Alternatively, you can insert both sets of credentials into the same file and select which name to use on the ASMCLI command line. In this
case, you use the
--user-name
option with the
create smart-copy
command, as follows:
# asmcli create group-access --name eqlgroup1 --ip-address
192.x.x.xx --user-name user-admin
Password for user-admin on eqlgroup1:
# asmcli create group-access --name eqlgroup1 --user-name accnt-admin
Password for accnt-admin on eqlgroup1:
# asmcli create smart-copy --source /user1 /user2 --user-name user-admin
# asmcli create smart-copy --source /accnt-recv --user-name accnt-admin
NOTE:
In the previous example, ASM/LE needs to connect to a PS Series group. If a group access file has multiple user
names for the group, but the
create smart-copy
command does not include the
--user-name
option to select the
user name to use, the command will fail. A unique identity is required to process the request.
Example 4: Creating a Group Access Record Without Specifying a Password
When you create a group access file and specify the
--no-password
option, ASMCLI does not store and encrypt a password in the
group access file. In this example, the group access file for Group3 is created without storing a password.
# asmcli list group-access
========================================================
Group Access
========================================================
Group name: Group1
IP address: 192.x.x.xx
User names: user-voladmin
Group name: Group2
IP address: 192.x.x.xy
User names: user-voladmin
2 Groups defined.
# asmcli create group-access --name Group3 --ip-address 192.x.x.xz
--user-name user-voladmin
--no-password
Auto-Snapshot Manager Command Line Interface
59