Users Guide
To add and congure local CMC users:
1 In the left pane, click Chassis Overview, and then click User Authentication.
2 On the Local Users page, in the User ID column, click a user ID number. The User Conguration page is displayed.
NOTE: User ID 1 is the root user account that is shipped by default with a CMC. This cannot be changed.
3 Enable the user ID and specify the user name, password, and access privileges for the user. For more information about the options,
see the Online Help.
4 Click Apply. The user is created with appropriate privileges.
Congure local users using RACADM
NOTE: You must be logged in as a root user to execute RACADM commands on a remote Linux system.
You can congure up to 16 users in the CMC property database. Before you manually enable a CMC user, verify if any current users exist.
If you are conguring a new CMC or if you have used the racadm racresetcfg command, the only current user account is default root
account. The racresetcfg subcommand resets all conguration parameters to the default values. Any earlier changes are lost.
NOTE: Users can be enabled and disabled over time, and disabling a user does not delete the user from the database.
To verify if a user exists, open a Telnet/SSH text console to the CMC, log in, and then type the following command once for each index of
1–16:
racadm getconfig -g cfgUserAdmin -i <index>
NOTE
: You can also type racadm getconfig -f <myfile.cfg> and view or edit the myle.cfg le, which includes all the
CMC conguration parameters.
Several parameters and object IDs are displayed with their current values. Two objects of importance are:
# cfgUserAdminIndex=XX
cfgUserAdminUserName=
If the cfgUserAdminUserName object has no value, that index number, which is indicated by the cfgUserAdminIndex object, is
available for use. If a name is displayed after the "=", that index is taken by that user name.
When you manually enable or disable a user with the racadm config subcommand, you must specify the index with the -i option.
The "#" character in the command objects indicates that it is a read-only object. Also, if you use the racadm config -f racadm.cfg
command to specify any number of groups/objects to write, the index cannot be specied. A new user is added to the rst available index.
This behavior allows more exibility in conguring a second CMC with the same settings as the main CMC.
Conguring Active Directory users
If your company uses the Microsoft Active Directory software, you can congure the software to provide access to CMC, allowing you to
add and control CMC user privileges to your existing users in your directory service. This is a licensed feature.
NOTE
: On the following Operating Systems, you can recognize the users of CMC users by using Active Directory.
• Microsoft Windows 2000
• Microsoft Windows Server 2003
• Microsoft Windows Server 2008
You can congure user authentication through Active Directory to log in to the CMC. You can also provide role-based authority, which
enables an administrator to congure specic privileges for each user.
Conguring
user accounts and privileges 113