That's look alright. The password is for the application authmethod for i.e ontapi/ssh , which is by defualt. This is locally created on the SVM. However, if you wish to have a user in AD login to system manager or use zapi then that user can have a authentication method as 'domain'.
1) Log in to the cluster using SSH 2) Validate no tunnel exists by running the following command: ::>security login domain-tunnel show Note: You can only have one domain tunnel. 3) If a tunnel does not exist, create one by running the following command: ::>security login domain-tunnel create –vserver <CIFS Vserver Name> 4) Add the 'zapi/zoom' service account with API rights: To add an account, run the following command: ::>security login create –vserver <Cluster Name> -username <domainService_account> –application ontapi –authmethod domain
To add additional rights such as SSH, change the application seting: security login create -username <domainService_account> –application SSH -authmethod domain