Role management (role authentication order) screen – HP Virtual Connect 4Gb Fibre Channel Module for c-Class BladeSystem User Manual
Page 83
![background image](/manuals/397682/83/background.png)
Virtual Connect users and roles 83
Role Management (Role Authentication Order) screen
Use this screen to specify the authentication services to be used during log in and to set the order in which
each authentication method is queried for each role. Role authentication order is followed for role-prefixed
logins only, such as "domain:user1". In the case of an authentication service-prefixed login, such as
"radius:user1", or a default login without a prefix, such as "user1", the login succeeds if credentials are
correct and the authentication service is enabled, regardless of what role authentication orders are defined.
By default, VCM queries the authentication services for each role in the following order:
•
Domain: local > ldap > radius > tacacs
•
Network: tacacs > radius > local
•
Server: ldap > local
•
Storage: radius > local
If a method fails, the next method is tried, and so on.
For each role (Domain, Network, Server, and Storage):
1.
Select the check boxes corresponding to the authentication services to query on user login.
2.
Configure the order of the queries:
a.
Click an authentication service to highlight it.
b.
Click the up and down arrows to set the query order.
3.
Click Apply.
Unselected authentication services are not queried, regardless of the order in which they appear.
Clicking another link in the pull-down menu or left navigation tree causes current edits that have not been
applied to be lost.