HP ProLiant DL380G5-WSS 3.7.0 HP StorageWorks HP Scalable NAS File Serving Sof - Page 219

12 Configure security features HP Scalable NAS provides the following security features: • Role-Based Security. By default, the root account has full cluster rights and can perform all HP Scalable NAS operations. You can use the Role-Based Security feature to create roles that allow or deny other users and groups the ability to perform specific cluster operations. • An audit trail of cluster operations that change the state or configuration of the cluster, as well as operations that consume large amounts of system resources. The audit messages specify both the operation performed and the user who initiated the operation. User authentication When HP Scalable NAS is installed, it determines whether the Pluggable Authentication Modules (PAM) mechanism is configured on the system. If PAM is installed, a PAM configuration file will be created for the HP Scalable NAS pswebsrv authentication module, and authentication will be done via the method specified in the PAM configuration. If PAM is not installed on the system, authentication will be done with the local shadow password files. NOTE: If PAM is installed after the HP Scalable NAS installation, copy the /etc/opt/ hpcfs/mxauthpw.pam file into the/etc/pam.d/mxauthpw directory, removing the .pam suffix from the file. HP Scalable NAS will then use PAM for authentication. Role-based security When you attempt to perform cluster operations, HP Scalable NAS authenticates your credentials via PAM to determine the user account and the groups to which you HP Scalable NAS File Serving Software administration guide 219