Fujitsu DX8100 S2 Manual Do Utilizador
ETERNUS Web GUI User’s Guide
Copyright 2013 FUJITSU LIMITED
P2X0-1090-10ENZ0
1013
Appendix G
Using RADIUS Authentication
This chapter describes supplementary notes when using RADIUS Authentication.
G.1
Using RADIUS Authentication to Access the ETERNUS DX Disk
Storage System
Storage System
•
RADIUS Authentication is used to authenticate logging in to the ETERNUS DX Disk storage system with GUI
or CLI.
or CLI.
•
Up to two RADIUS servers can be connected to an ETERNUS DX Disk storage system.
•
To use RADIUS Authentication, the user account information (user name, password, and role name) that is
allowed to access ETERNUS DX Disk storage system in the RADIUS server must be pre-registered.
allowed to access ETERNUS DX Disk storage system in the RADIUS server must be pre-registered.
•
There are two types of authentication methods: CHAP and PAP.
•
User roles are specified in the Vendor Specific Attribute (VSA) of the Access-Accept response from the
server. The following table shows the syntax of the VSA based account role on the RADIUS server.
server. The following table shows the syntax of the VSA based account role on the RADIUS server.
Syntax of the Vendor Specific Attribute (VSA) based account role
*1: The server-side role names are case sensitive and must be set correctly.
[Example] RoleName0
Item
Size
(octets)
Value
Description
Type
1
26
Attribute number for the Vendor Specific Attribute
Length
1
7 or more
Attribute size (calculated by server)
Vendor-Id
4
211
Fujitsu Limited (SMI Private Enterprise Code)
Vendor type
1
1
Eternus-Auth-Role
Vendor length
1
2 or more
Attribute size described after the Vendor type
(calculated by server)
(calculated by server)
Attribute-Specific
1 or more
ASCII characters
List of one or more role names assignable to
successfully authenticated users (*1)
successfully authenticated users (*1)