HP StorageWorks Fabric OS 6.x administrator guide (5697-7344, March 2008)
76 Managing user accounts
To add a RADIUS server to the switch configuration:
1. Connect to the switch and log in using an admin account.
2. Enter this command:
switch:admin> aaaConfig --add <server> [-p port] [-s secret] [-t timeout]
[-a pap | chap | peap-mschapv2]
To add an LDAP server to the switch configuration:
1. Connect to the switch and log in using an admin account.
2. Enter this command:
switch:admin> aaaConfig --add <server> [-p port] [-t timeout] [-d
domain_name]
At least one RADIUS or LDAP server must be configured before you can enable the RADIUS or LDAP
service.
If no RADIUS or LDAP configuration exists, turning it on triggers an error message. When the command
succeeds, the event log indicates that the configuration is enabled or disabled.
server Enter either a server name or IPv4 or IPv6
address. Avoid duplicating server listings
(that is, listing the same server once by name
and again by IP address). Up to five servers
can be added to the configuration.
-p port Optional: Enter a server port. The default is
port 1812.
-s secret Optional: Enter a shared secret. The default is
“sharedsecret”. Secrets can be from 8 to 40
alphanumeric characters long. Make sure that
the secret matches that configured on the
server.
-t timeout Optional: Enter the length of time (in seconds)
that the server has to respond before the next
server is contacted. The default is three
seconds. Time-out values can range from 1 to 30
seconds.
-a
[pap|chap|peap-msc
hapv2]
Specify PAP, CHAP or PEAP as authentication
protocol. Use peap-mschapv2 to provide
encrypted authentication channel between the
switch and server.
server Enter either a server name or IPv4 address. Microsoft’s Active
Directory does not support IPv6 addresses. Avoid duplicating
server listings (that is, listing the same server once by name and
again by IP address). Up to five servers can be added to the
configuration.
-p port Optional: Enter a server port. The default is port 389.
-t timeout Optional: Enter the length of time (in seconds) that the server has
to respond before the next server is contacted. The default is three
seconds. Time-out values can range from 1 to 30 seconds.
-d domain_name Enter the name of the Windows domain.