Working with radius servers, Adding and removing a radius server, Enabling and disabling a radius server – HP ProLiant DL170e G6 Server User Manual

Page 36

Advertising
background image

SL-APM logging 36

Fault logged message Description

code = X
WARNING: Password
bypass DIP #1 is set,

password security is
bypassed

Security bypass is enabled. No passwords are required to access the SL-APM.

Firmware update to
Dist. Module, port X

failed, retry Y being
attempted

While upgrading the firmware on a Power Manager Distribution Module, an error
occurred. Retry being attempted.

Firmware update to
Dist. Module, port X - all

retries, failed, giving up

While upgrading the firmware on a Power Manager Distribution Module, too many
errors occurred and the operation has been terminated.

Working with RADIUS servers

The SL-APM firmware supports the RADIUS authentication protocol. When RADIUS is enabled, it is used to

verify login requests to SL-APM through SSH, telnet, or the serial console.

Adding and removing a RADIUS server

To add a RADIUS server, enter ADD RADIUS SERVER <ip_address> <shared_secret>.
This command specifies an initial or additional RADIUS server to the SL-APM list of authentication servers. The

authentication proceeds in the same order that these servers were added to the configuration. Up to a total

of five RADIUS servers can be added for authentication purposes. Port 1812 is assumed. The IP address must

match the location of the RADIUS server. The shared secret must be specified in quotes and must match the
string that has been programmed into the RADIUS server when receiving authentication requests from

SL-APM.
To set the number of times SL-APM polls each of the RADIUS server indicated in the ADD RADIUS SERVER

command, enter SET RADIUS POLLNUM. To set the number of seconds SL-APM waits for a reply from the

RADIUS server, enter SET RADIUS POLLSEC. These settings can only be set globally and cannot be applied

to each individual RADIUS server.
To remove a RADIUS server, enter REMOVE RADIUS SERVER <index>.
This command removes a previously added RADIUS server that matches the index indicated with the SHOW

RADIUS command. RADIUS authentication is no longer attempted against this server.

Enabling and disabling a RADIUS server

To enable SL-APM as a RADIUS client, enter ENABLE RADIUS.
All login attempts through SSH, Telnet, and the serial console are authenticated through the list of RADIUS
servers that were indicated with the ADD RADIUS SERVER command. Authentication is also verified against

the local password if the RADIUS servers indicate no access.
To disable RADIUS authentication on SL-APM, enter DISABLE RADIUS.

Advertising