Configure User Privileges for RADIUS Users

The following example shows how to configure the FreeRADIUS server to support a RADIUS client on the switch. The actual syntax might differ depending on the RADIUS server you use.

1. Add a file called dictionary.oracle to /usr/local/share/freeradius/. The following contents must be in dictionary.oracle in order to configure the fs_privilege setting on a per-RADIUS user basis.

   # -*- text -*-
   #
   #       Oracle VSA
   #
   #       $Id$
   #
   VENDOR        Oracle        111
    
   BEGIN-VENDOR    Oracle
    
   ATTRIBUTE        Sefos-Fs-Privilege       225     integer
   ATTRIBUTE        Ilom-Role                226     string
    
   END-VENDOR        Oracle

   Generally, the server must ensure that the fs_privilege setting for a user is sent to the client in the Access-Accept message in the following format:

   Type         = 26
   Length    = 12
   Vendor-Id     = 111
   Type        = 225
   Length    = 6
   Value        = <Sefos-Fs-Privilege value from raddb/users file>
   Type        = 26
   Length    = 21
   Vendor-Id    = 111
   Type        = 226
   Length    = 15
   Value        = <Ilom-Role value from raddb/users file>

2. Add users to the users file in /usr/local/etc/raddb/ as follows:

   user-john
       Sefos-Fs-Privilege = 15,
       Ilom-Role = "Operator"
    
   user-doe
      Sefos-Fs-Privilege = 1
      Ilom-Role = "u"

   The fs_privilege values that are provided in this file must be integers.

   The ILOM Role values must be strings, even if they are single character role values. Also, to combine more than one ILOM role values, single letter designations must be used. For example, Ilom-Role = ”auc”, Ilom-Role = “aucro”, etc. In such cases, using the full form of roles is not allowed. For example, Ilom-Role = ”Administrator,User,Console” is not allowed.

3. Add the following entries to the dictionary file in /usr/local/etc/raddb/ as follows:

   user-john
   #       Place additional attributes or $INCLUDEs here.  They will
   #       over-ride the definitions in the pre-defined dictionaries.
   #
   #       See the ’man’ page for ’dictionary’ for information on
   #       the format of the dictionary files.
   $INCLUDE        /usr/local/share/freeradius/dictionary.oracle

   ---

   Note - Refer to the Oracle Integrated Lights Out Manager (ILOM) 3.0 Getting Started Guide for more information about configuring your system for RADIUS.

   ---