Technical data

3-6 Fabric OS Administrator’s Guide
Publication Number: 53-0000518-09
Creating and Maintaining User-Defined Accounts
3
Creating and Maintaining User-Defined Accounts
In addition to the default administrative and user accounts, Fabric OS supports up to 15 user-defined
accounts in each logical switch (domain). These accounts expand your ability to track account access
and audit administrative activities.
User-defined accounts can be assigned either admin, switchAdmin, or user level roles. Admin-level
accounts allow up to two simultaneous login sessions. User-level accounts allow up to four
simultaneous login sessions. The total number of simultaneous login sessions allowed per logical switch
is 15.
You can change passwords on user-defined accounts as described in “Changing an Account Password”
on page 3-8.
If the track changes feature is enabled, the system keeps track of account names and login attempts.
(Refer to “Tracking and Controlling Switch Changes” on page 2-20 for details on enabling the track
changes feature.)
For large enterprises, Fabric OS also supports RADIUS services, as described in “Setting Up RADIUS
AAA Service” on page 3-9.
The following procedures are for operations you can perform on user-defined accounts.
SilkWorm 3016: The default administrative account is called “USERID”. For instructions on changing
this name, refer to “To change the default administrative account name on the SilkWorm 3016” on
page 2-5. On all other models, the default administrative account is “admin”.
To display account information
1. Connect to the switch and log in as admin.
2. Enter one of the following commands:
• userConfig --show -a to show all account information for a logical switch
• userConfig --show -b to show all backup account information for a logical switch
• userConfig --show username to show account information for the specified account name
Accounts with the admin role can display information about all accounts on the logical switch.
Accounts with the switchAdmin role can display information about all accounts on the logical switch,
however, it cannot display information about security, user management, or zoning. Accounts with the
user role can display only information about themselves.
N
ote
If you are operating in secure mode, you can perform these operations only on the primary FCS switch.