Cyclades AlterPath BladeManager Manual de instrucciones descargar pdf (Pagina 154)

140 MergePoint 5224/5240 Service Processor Manager Installer and Administrator Guide

NOTE: These additions can be made through a GUI. The example shows the configuration if a GUI is

not available.

2. To the definition for each user, add the raccess service in the form service = raccess and assign

the desired group to the user in the form member = group_name.

NOTE: Each user may belong to only one group. To give a user administrative access to the SP manager,

assign the admin group.

Configuring a TACACS+ authentication server on the SP manager

The following list defines the values that must be defined in the SP manager’s /etc/tacplus.conf file.

• authhost1: IP address of the TACACS+ authentication server. A second TACACS+

authentication server can be configured with the parameter authhost2.

• accthost1: IP address of a TACACS+ accounting server, which can be used to track how long

users are connected after being authorized by the authentication server. Its use is optional. If

this parameter is not defined, accounting is not be performed. If the same server is used for

authentication and accounting, both parameters must be defined with the same address. A

second TACACS+ accounting server can be configured with the parameter accthost2.

• secret: The shared secret (password) necessary for communication between the SP manager

and the TACACS+ servers.

• encrypt: The default is 1, enable encryption. A value of 0 means disable encryption.

• service: The service to be enabled, in this case: raccess.

• protocol: The default is lcp (line control protocol). Specify another parameter if required.

###########################################################

# Group Definitions

###########################################################

group = group_name {

...

}

###########################################################

# User Definitions

###########################################################

user = username {

service = raccess

member = group_name

}

1 2 ... 149 150 151 152 153 154 155 156 157 158 159 ... 239 240

Sin comentarios

Cyclades AlterPath BladeManager Manual de instrucciones Pagina 154