Bug 240 - [vAPV] Need to integrate Admin Account with ADFS and LDAP server for AAA || State Bank of India

Review Request #120 — Created Jan. 22, 2024 and discarded

rodiveedu
APV10
rel_apv_10_4_0_112_sbi
kdutta, pradeep, prajesh

Bug 240 - [vAPV] Need to integrate Admin Account with ADFS and LDAP server for AAA || State Bank of India

login as: array
array@192.168.12.24's password:
Last login: Wed Jan 24 04:03:02 2024 from 192.168.12.23
ArrayOS Beta.APV.12.4.3.001 - untagged unofficial build by uid=0(root) gid=0(roo t) groups=0(root) on ustack-dev: on Tue Jan 23 22:03:38 2024
Copyright (c) 2000-2024 Array Networks Inc. All rights reserved.

Type "?" for available commands

!!Reminder!! Please log on to the WebUI to register this system.

AN>en
Enable password:

AN#conf t
Someone else is in config mode.
Access denied!
Failed to execute "conf t"

AN#c t force

AN(config)#clear admin aaa all

AN(config)#sh admin aaa all
admin aaa off
admin aaa authorize off
admin aaa method RADIUS

AN(config)#admin aaa on 1

AN(config)#admin aaa me

AN(config)#admin aaa method LDAP

AN(config)#admin aaa server es03 "192.168.12.18" 389 ldpsecr
Warning: Secret is not applicable for LDAP configuration.
Failed to execute "admin aaa server es03 "192.168.12.18" 389 ldpsecr"

AN(config)#admin aaa server es03 "192.168.12.18" 389

AN(config)#admin aaa server es03 "192.168.12.18" 389 ?
Secret (Secret used for Radius or Tacacs,not applicable for ldap)

AN(config)#sh admin aaa all
admin aaa on 1
admin aaa authorize off
admin aaa method LDAP
admin aaa server es03 "192.168.12.18" 389

AN(config)#writ

AN(config)#write mem

AN(config)#write memory

AN(config)#sys

AN(config)#system reboot
Unsaved configuration changes will be lost
This will reboot the system immediately
type "YES" to continue:YES
Rebooting...
login as: array
array@192.168.12.24's password:
ArrayOS Beta.APV.12.4.3.001 - untagged unofficial build by uid=0(root) gid=0(root) groups=0(root) on ustack-dev: on Tue Jan 23 22:03:38 2024
Copyright (c) 2000-2024 Array Networks Inc. All rights reserved.

Type "?" for available commands

!!Reminder!! Please log on to the WebUI to register this system.

AN>en
Enable password:

AN#sh admin aaa all
admin aaa on 1
admin aaa authorize off
admin aaa method LDAP
admin aaa server es03 "192.168.12.18" 389

AN#conf t

AN(config)#no admin aaa server es03

AN(config)#sh admin aaa all
admin aaa on 1
admin aaa authorize off
admin aaa method LDAP

AN(config)#clear admin aaa all

AN(config)#sh admin aaa all
admin aaa off
admin aaa authorize off
admin aaa method RADIUS

AN(config)#

Description From Last Updated

Fix persistance one, no need to add exra ldap_server/radius_server option. Keep it simple.

kduttakdutta

AN(config)#admin aaa server es03 "192.168.12.18" 234 ? Secret AN(config)#admin aaa server es03 "192.168.12.18" 234 Why for ldap secret is appearing …

kduttakdutta

what is es03? is this default ldap server name?

prajeshprajesh

write mem, show run all , are these commands taken care off?

prajeshprajesh

Do we have all the changes in the review?

prajeshprajesh

no need to change the name

kduttakdutta

update comment too.

prajeshprajesh

this should be a Error instead of Warning if you are failing the CLI

prajeshprajesh

else can continue here..

prajeshprajesh
rodiveedu
prajesh
  1. 
      
  2. what is es03? is this default ldap server name?

    1. yes, es03 is ldap server id praveen

  3. 
      
prajesh
  1. 
      
  2. write mem, show run all , are these commands taken care off?

    1. everything is taken care praveen

  3. 
      
rodiveedu
kdutta
  1. 
      
  2. Fix persistance one, no need to add exra ldap_server/radius_server option. Keep it simple.

  3. 
      
rodiveedu
rodiveedu
rodiveedu
kdutta
  1. 
      
  2. AN(config)#admin aaa server es03 "192.168.12.18" 234 ?
    Secret

    AN(config)#admin aaa server es03 "192.168.12.18" 234

    Why for ldap secret is appearing in cli? Need to fix this.

    1. fixed this As discussed ldap will throw error if user config secret.

  3. 
      
prajesh
  1. 
      
  2. Do we have all the changes in the review?

  3. 
      
rodiveedu
rodiveedu
kdutta
  1. 
      
    1. not changed ansuk.kept it same

  2. 
      
rodiveedu
prajesh
  1. 
      
  2. this should be a Error instead of Warning if you are failing the CLI

  3. 
      
rodiveedu
Review request changed

Status: Discarded

Loading...