HP A7533A HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, Dece - Page 78

78

Managing user accounts

Figure 2

Example of a Brocade DCT file

Figure 3

Example of the

dictiona.dcm file

c.

When selecting items from the

Add Return List Attribute

, select

Brocade-Auth-Role

and enter the

string

Admin

. The string will equal the role on the switch.

d.

Add the Brocade profile.

4.

In

RSA Authentication Manager

, edit the user records that will be authenticating using RSA SecurID.

LDAP configuration and Microsoft’s Active Directory

LDAP provides user authentication and authorization using Microsoft's Active Directory service in

conjunction with LDAP on the switch. There are two modes of operation in LDAP authentication, FIPS mode

and non-FIPS mode. This section discusses LDAP authentication in non-FIPS mode. For more information on

###########################################################################

# brocade.dct -- Brocade Dictionary

#

# (See readme.dct for more details on the format of this file)

###########################################################################

#

# Use the Radius specification attributes in lieu of the Brocade one:

#

@radius.dct

MACRO Brocade-VSA(t,s) 26 [vid=1588 type1=%t% len1=+2 data=%s%]

ATTRIBUTE

Brocade-Auth-Role

Brocade-VSA(1,string) r

###########################################################################

# brocade.dct -- Brocade Dictionary

###########################################################################

#######################################################################

# dictiona.dcm

#######################################################################

# Generic Radius

@radius.dct

#

# Specific Implementations (vendor specific)

#

@3comsw.dct

@aat.dct

@acc.dct

@accessbd.dct

@agere.dct

@agns.dct

@airespace.dct

@alcatel.dct

@altiga.dct

@annex.dct

@aptis.dct

@ascend.dct

@ascndvsa.dct

@axc.dct

@brocade.dct

@bandwagn.dct

@brocade.dct

<-------

HP A7533A HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, Dece - Page 78

LDAP configuration and Microsoft's Active Directory

Page 78 highlights