HP Manager Software manual Accept user globs and MAC address globs, User Globs

Configuring and Managing Access Rules for Administrative Users 281

When configuring authentication for console users, make sure that there is a username and password defined in the local WX user database that you can use to log in through the console. Also make sure that you configure authentication for console users so that the user glob includes at least one valid local user. Otherwise, you could prevent anyone from being able to use the console to access the WX.

For any user, authorization uses the same method(s) as authentication for that user.

Using User Globs and “Globbing” allows you to use a wildcard pattern to expand a single MAC Address Globs element into a list of elements that match the pattern. MSS and 3WXM

accept user globs and MAC address globs.

User Globs

A user glob is a shorthand method for applying an authentication, authorization, and accounting (AAA) command to a single user or a set of users.

A user glob can be up to 80 characters long and cannot contain spaces or tabs. A single asterisk (*) wildcard character matches any characters up to, but not including, a separator character in the user glob. Valid user glob separators include the at sign (@) and period (.). The double-asterisk (**) wildcard characters with no delimiters match all usernames

For example, the following user globs identify the following users:

„jose@example.com — specifies the user jose at example.com

„*@example.com — specifies all users at example.com whose usernames do not contain periods (for example, jose@example.com and tamara@example.com, but not nin.wong@example.com)

„*@engineering.example.com — specifies all engineering users at example.com whose names do not contain periods

„*.*@engineering.example.com — specifies all engineering users whose usernames contain periods

„* — specifies all usernames that have no delimiters

„EXAMPLE\* — specifies all users in the Windows Domain EXAMPLE with usernames that have no delimiters

„EXAMPLE\*.* — specifies all users in the Windows Domain EXAMPLE whose usernames contain a period