No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Administrator Guide 15

OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, and 6800 V3 Storage System V300R003

Routine maintenance activities are the most common activities for the storage device, including powering on or off the storage device, managing users, modifying basic parameters of the storage device, and managing hardware components. This document applies to the system administrators who are responsible for carrying out routine maintenance activities, monitoring the storage device, and rectifying common device faults.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
User Permission List

User Permission List

The OceanStor 5300 V3/5500 V3/5600 V3/5800 V3/6800 V3 storage system defines different management accounts and other accounts as well as allocates different configuration and maintenance permissions to these accounts. The following describes levels, usage, and default user names and passwords of different accounts and how to change the passwords of these accounts.

Management Accounts

Table 3-19 lists the management accounts and password policies supported by the storage system.

Table 3-19  Management accounts and password policies

Account Category

User Level

Usage

Default User Name

Default Password

Method for Changing Passwordsa

Built-in controller enclosure user

Root administrator

Used to initialize the password of the super administrator when the super administrator forgets its password. (The old password is required when the super administrator wants to set a new password.) The user can only be logged in to using a serial port.

_super_admin

Admin@revive

Run the chgsuperpasswd command. For details about how to change a password, see OceanStor 5300 V3&5500 V3&5600 V3&5800 V3&6800 V3 Storage System V300R003 Restricted Command Reference. Contact Huawei technical support to obtain related documents.

Super administrator

Used to transmit files between internal controllers through the SFTP protocol.

ibc_os_hs

Storage@21st

Run the chgibcpasswd command. For details about how to change a password, see OceanStor 5300 V3&5500 V3&5600 V3&5800 V3&6800 V3 Storage System V300R003 Restricted Command Reference. Contact Huawei technical support to obtain related documents.

Machine-machine account

Used to initialize resource files when DeviceManager is started and implement some functions of CLI or other tool software.

mm_user

mm_user@storage

Run the change mm_user password command. For details about how to change a password, see OceanStor 5300 V3&5500 V3&5600 V3&5800 V3&6800 V3 Storage System V300R003 Command Reference .

Super administrator

Used to access the BMC system using a serial port.
NOTE:

The account is only applicable to 3 U or 6 U controller enclosures.

administrator

Huawei12#$

Run the password command. For details about how to change a password, see OceanStor 5300 V3&5500 V3&5600 V3&5800 V3&6800 V3 Storage System V300R003 Restricted Command Reference. Contact Huawei technical support to obtain related documents.

Super administrator (A)

The user completely controls the storage system and can manage users at the same or a lower level and initialize their passwords.

admin

Admin@storage

Method for changing the password:
  1. Log in to DeviceManager.
  2. Choose Settings > Basic Service Settings > Permission Settings > User Management.
  3. Select the user whose password you want to change and click Modify.
  4. In the Modify User dialog box that is displayed, change the password of the user.
  5. Click OK.
NOTE:

If the password of super administrator (A) for the storage system is changed, the password of super administrator (B) for the SES system is automatically changed to the same value.

Super administrator (B)

A built-in account in the SES system of controller and disk enclosures

Used to log in to disk enclosures and 2 U controller enclosures using a serial port.

admin

Admin@storage

Method for changing the password:
  1. Log in to DeviceManager.
  2. Choose Settings > Basic Service Settings > Permission Settings > User Management.
  3. Select the user whose password you want to change and click Modify.
  4. In the Modify User dialog box that is displayed, change the password of the user.
  5. Click OK.
NOTE:

If the password of super administrator (B) for the SES system is changed, the password of super administrator (A) for the storage system is automatically changed to the same value.

File system NDMP account

Machine-machine account

Used to manage the NDMP service of the storage system on a client.

ndmpadmin

Ndmp@storage

Method for changing the password:
  1. Log in to DeviceManager.
  2. Choose Settings > Basic Service Settings > Storage Settings.
  3. In the navigation tree, choose File Storage Service > NDMP Settings.
  4. Click Modify next to Password.
  5. In New Password, Confirm Password, and Old Password, enter related information as prompted.
  6. Click OK.

Built-in SystemReporter user

Super administrator

Used to log in to the OceanStor SystemReporter.

admin

Admin@storage

For details about how to change a password, see the SystemReporter user guide of the corresponding version.

a: You are advised to change the default login password immediately after you log in to the storage system for the first time, and to periodically change your login password in the future. This reduces password leakage risks.

Built-in Accounts

Apart from management accounts, the storage system has other built-in accounts that can be used to control the system running process. Table 3-20 lists other built-in accounts.
NOTE:

These built-in accounts are only running in the storage system and cannot be used to log in to and access the storage system from an external system.

Table 3-20  Built-in accounts

Module

Account Name

Description

OS

root

Used to start, stop, and run core processes that require the root permission in the operating system of the storage system.

ftp

Used to start, stop, and run daemon processes of the SFTP and FTP services in the operating system of the storage system.

nobody

An anonymous account. Special permissions are not required when software processes are assigned to the nobody account.

news

Used by news servers and other related programs.

daemon

A system account used to control background processes.

sshd

Used to start, stop, and run the sshd daemon process.

dhcpd

Used to start, stop, and run the dhcpd daemon process.

at

Used to regularly start, stop, and run the application program transactions in the operating system of the storage system.

OceanStorMgrUser

Used to control the processes related to DeviceManager.

qemu

Used to simulate I/O operations in the virtualization process.

messagebus

Used to transmit messages among system processes.

polkituser

policykit account.

haldaemon

Used to monitor hardware state changes.

dnsmasq

Account used by the DNS service.

BMC

root

Used to start, stop, and run core processes that require the root permission in the operating system of the storage system. The system has prohibited the account's login attempts.

ftp

Used to start, stop, and run daemon processes of the SFTP and FTP services in the operating system of the storage system.

nobody

An anonymous account. Special permissions are not required when software processes are assigned to the nobody account.

sshd

Used to start, stop, and run the sshd daemon process.

telnetd

Used to start, stop, and run the Telnet daemon process, and provide the Telnet virtual terminal services.

administrator

Default login account.

Translation
Download
Updated: 2019-04-17

Document ID: EDOC1000084191

Views: 85621

Downloads: 2297

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next