Brocade Fabric OS Command Reference Guide v6.1.0 (53-1000599-02, June 2008)

40 Fabric OS Command Reference
53-1000599-02
authUtil
2
authUtil
Displays and sets the authentication configuration.
Synopsis authutil
authutil --show
authutil --set option value
authutil --policy -sw option | -dev option
authutil --authinit [slotnumber]/portnumber[, [slotnumber/]portnumber...] | allE
Description Use this command to display and set local switch authentication parameters.
Use --set to change authentication parameters such as protocol, Diffie-Hellman group (DH group),
or hash type. When no protocol is set, the default setting of “FCAP, DH- CHAP” is used. When no
group is set, the default setting of “*” (meaning “0,1,2,3,4”) is used. Configuration settings are
saved persistently across reboots. Configuration changes take effect during the next authentication
request.
Use --show to display the current authentication configuration. Use portShow to display the
authentication type and associated parameters, if applicable, used on the port.
Note The execution of this command is subject to Admin Domain restrictions that may be in place. Refer
to chapter 1, "Understanding Admin Domain Restrictions" and Appendix A, "Command Availability"
for details.
Operands When invoked without operands, this command displays the usage. The following operands are
supported:
--show Displays local authentication configuration.
--set value Modifies the authentication configuration. Valid options and their values are:
-a fcap |dhchap | all
Sets the authentication protocol. Specify “fcap” to set only FCAP
authentication, “dhchap” to set only DH-CHAP authentication. Specify “all” to
set both FCAP and DH-CHAP, which is the default setting. When
authentication is set to “all”, the implicit order is FCAP followed by DH-CHAP.
This means that in authentication negotiation, FCAP is given priority over
DH-CHAP on the local switch.
-g 0|1|2|3|4|*
Sets the Diffie-Hellman (DH) group. Valid values are 0 to 4 and “*”. The DH
group 0 is called NULL DH. Each DH group implicitly specifies a key size and
associated parameters. Higher group value provides stronger cryptography
and a higher level of security. When DH group is set to a specified value, only
that DH group is enabled. Specifying “*” enables all DH groups 0, 1, 2, 3, and
4, in that order. This means that in authentication negotiation, the NULL DH
group s given priority over all other groups.
-h sha1 | md5 | all