HP XP Racks - Manual (Page 345)

Linking to an external authentication server
To link to an external authentication server:
1. On the Device Manager management server, specify settings for linking to an external
authentication server.
For details about requirements for an external authentication server and how to specify settings
for linking to the server, see the HP P9000 Replication Manager Software Configuration Guide.
2. Register the user IDs and passwords used by P9000 Command View AE Suite products in the
external authentication server.
The user IDs must be character strings that are within the valid range for Web client. For details
about valid character strings, click Help in the Add User dialog box. For passwords, you do not
have to follow the Replication Manager restrictions.
3. Register P9000 Command View AE Suite product users using the user IDs registered in step 2.
For details about how to register users, see “ Adding users ” on page 87. This step is not necessary
if you have done this already.
TIP:
In Web client, specify the same user IDs registered in the external authentication server as
those common to the P9000 Command View AE Suite products.
In the following cases, include the realm when specifying a user ID:
• A user that is authenticated by another RADIUS server connected using a RADIUS server
that is specified as the connection destination in step 1.
• A user that is registered in a Kerberos server and belongs to a realm other than the
realm specified as the default in step 1.
For example, if the user name that is registered in a RADIUS or Kerberos server is user1 ,
the realm is example.com , and the separator is @ , specify [email protected] as
the user ID. If multiple user IDs have the same user name and different realms, each user
ID is authenticated as a separate user ID.
TIP:
Setting passwords is optional. Users authenticated externally are done so using the passwords
registered in the external authentication server. Note that you can set passwords in advance
because, if passwords have not been set, the user account will be locked when you change
the authentication method from external authentication to user authentication common to
P9000 Command View AE Suite products.
4. Specify permissions for the users registered in step 3.
For details about how to specify user permissions, see “ Changing user permissions ” on page 88.
This step is not necessary if you have done this already.
User Guide 345