Manages access control records for Microsoft service access to the group, including Volume Shadow Copy Service (VSS) and Virtual Disk Service (VDS).
When you create an access control record, the record is automatically assigned an identification number. Use this number to manage the record with the CLI.
Note: If you are using CHAP to authenticate access to the group, you will have to set up a CHAP account either locally, as described in chapuser, or on a RADIUS server that is known to the group, as described in grpparams radius-auth-list.
The Windows server that is running the Microsoft service must be configured with a matching CHAP user name and password. You can use the Remote Setup Wizard to set these credentials. See the Host Integration Tools documentation for more information.
Format
grpparams vss-vds access [subcommand]|show
Subcommands
|
create [parameter] |
Creates an access control record for Microsoft service access to the group. |
|
delete id |
Deletes the specified Microsoft service access control record. |
|
select id [parameter] |
Displays or modifies a Microsoft service access control record. |
|
show |
Displays information about all Microsoft service access control records. |
Parameters
|
username chap_name |
CHAP account name (up to 128 characters) to which access is restricted. The name must match a local CHAP account or an account on an external RADIUS server that is known to the group. You must also specify the authmethod chap parameter for CHAP authentication. |
|
ipaddress ip_address |
IP address to which access is restricted. An asterisk (*) in any of the four parts of an IP address is interpreted as a wildcard character; that is, any value is accepted for that 8-bit field. For example, specify *.*.*.* for unrestricted host access (not recommended except for testing). |
|
initiator name |
Name of the iSCSI initiator to which group access is restricted. For example: iqn.2000-05.com.qlogic.qla-4000.sn00044 |
|
authmethod chap|none |
Specifies whether the record uses CHAP authentication (chap) to restrict Microsoft service access to the group. The default is none; CHAP authentication is not used. You must also specify the username chap_name parameter for CHAP authentication. |
|
show |
Displays details about the selected access control record. |
Example
The following command creates a Microsoft service access control record that restricts group access to hosts that supply the correct CHAP user name and password:
# grpparams vss-vds access create authmethod chap username adm32