Server User Manual

Attention: The rmuser script is a generic script to remove any config element from config.xml correctly.
However, any dependencies or references to this group will not be affected. Only the group details are
deleted. The Administrator is responsible for going through config.xml and removing group
dependencies and references manually, specifically if the group had access to a host or RPC device.
The following command will synchronize the live system with the new configuration:
# config -a
14.5 Authentication
To change the type of authentication for the console server:
# config -s config.auth.type='authtype'
'authtype' can be:
Local
LocalTACACS
TACACS
TACACSLocal
TACACSDownLocal
LocalRADIUS
RADIUS
RADIUSLocal
RADIUSDownLocal
LocalLDAP
LDAP
LDAPLocal
LDAPDownLocal
To configure TACACS authentication:
# config -s config.auth.tacacs.auth_server='comma separated list' (list of remote authentiction
and authorization servers.)
# config -s config.auth.tacacs.acct_server='comma separated list' (list of remote accounting
servers. If unset, Authentication and Authorization Server Address will be used.)
# config -s config.auth.tacacs.password='password'
To configure RADIUS authentication:
# config -s config.auth.radius.auth_server='comma separated list' (list of remote authentiction
and authorization servers.)
# config -s config.auth.radius.acct_server='comma separated list' (list of remote accounting
servers. If unset, Authentication and Authorization Server Address will be used.)
# config -s config.auth.radius.password='password'
To configure LDAP authentication:
# config -s config.auth.ldap.server='comma separated list' (list of remote servers.)
# config -s config.auth.ldap.basedn='name' (The distinguished name of the search base. For
example: dc=my-company,dc=com)
# config -s config.auth.ldap.binddn='name' (The distinguished name to bind to the server with.
The default is to bind anonymously.)
# config -s config.auth.radius.password='password'
The following command will synchronize the live system with the new configuration:
# config -r auth
_____________________________________________________________________
724-746-5500 | blackbox.com Page 221