User`s guide

Chapter 15 User Authorization and Access Control 249
Syntax
Parameter Description
set ims -cache-timeout=[<number> default]
set ims -maps-to-root=<value>
set ims -search-order=[default|externalFirst|internalFirst]
set ims -server-type=[default|ldap_ad |local_only|radius]
set ims -token-timeout=[<number>][default]
set ims {ad-server|radius-server|radius-user} <name> <options>
show login
system flush ims
Parameter Description
-cache-timeout The cache time-out value is the number of minutes that XgOS
maintains a local copy of authentication and access information
retrieved from an external IMS.
Accepted values are from zero to 1440 minutes.
The default value is 240 minutes. A value of zero disables the cache.
For an example of using this option to control the time information is
kept in the cache, see “Example: Control Cached Authentication Data”
on page 269.
-maps-to-root root for RADIUS or users for AD.
-search-order Use this option to specify the order in which the Oracle Fabric
Interconnect searches when responding to a login request. Enter one
of:
default: use the default local IMS.
externalFirst: search the external IMS and use the local one only if
the request fails.
internalFirst: search the internal IMS and use the external one
only if the request fails.
For an example of using this option to control search order, see
“Example: Display the IMS Search Order” on page 269.
-server-type Indicates the kind of IMS server to be used. Enter one of:
• default: the local IMS.
• ldap_ad: an Active Directory server.
• local_only: the local IMS.
• radius: a RADIUS server.
• ldap_ibm: reserved for future use
• ldap_sun: reserved for future use