Brocade Fabric OS Administrator's Guide Supporting Fabric OS v6.3.0 (53-1001336-02, November 2009)

78 Fabric OS Administrator’s Guide
53-1001336-02
Local database user accounts
5
Local database user accounts
User add, change, and delete operations are subject to the subset rule: an admin with ADlist 0-10
or LFlist 1-10 cannot perform operations on an admin, user, or any role with an ADlist 11-25 or
LFlist 11-128. The user account being changed must have an ADlist or LFlist that is a subset of the
account that is making the change.
In addition to the default administrative and user accounts, Fabric OS supports up to 252
user-defined accounts in each logical switch (domain). These accounts expand your ability to track
account access and audit administrative activities.
Default accounts
Table 12 lists the predefined accounts offered by Fabric OS available in the local switch user
database. The password for all default accounts should be changed during the initial installation
and configuration for each switch.
Admin Domain and Virtual Fabric considerations: Administrators can act on other accounts only if
that account has an Admin Domain or Logical Fabric list that is a subset of the administrator.
Displaying account information
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the appropriate show operands for the account information you want to display:
• userConfig --show -a to show all account information for a logical switch
• userConfig --show username to show account information for the specified account
• userConfig --showad -a adminDomain_ID to show all accounts permitted to select the
specified adminDomain_ID
User 4
ZoneAdmin 4
TABLE 11 Maximum number of simultaneous sessions (Continued)
Role name Maximum sessions
TABLE 12 Default local user accounts
Account name Role Admin Domain Logical Fabric Description
admin Admin AD0-255
home: 0
LF1-128
home: 128
Most commands have
observe-modify permission.
factory Factory AD0-255
home: 0
LF1-128
home: 128
Reserved.
root Root AD0-255
home: 0
LF1-128
home: 128
Reserved.
user User AD0
home: 0
LF-128
home: 128
Most commands have observe-only
permission.