
Chapter 6: Administration Tasks Not Performed in the Web Manager 115
To configure a NFS-mounted directory for OTP database storage:
1. Make sure a directory (for example /home/opie), has been created on the NFS server and is
shared (exported) via NFS.
2. Log into the console as root.
3. Enable the RPC service using the
cli utility.
[root@MergePoint5224 /]# cli -CF set service rpc enable yes
4. Mount the directory from the NFS server.
The following screen example uses nfs_server.avocent.com as the NFS server name and
/home/opie as the exported directory’s name.
[root@MergePoint5224 /]# mount -t nfs nfs_server.avocent.com:\
/home/opie /mnt/opie
5. Enter the following commands to create the /etc directory on the mounted directory and to
create an opiekeys file.
[root@MergePoint5224 /]# mkdir /mnt/opie/etc
[root@MergePoint5224 /]# touch /mnt/opie/etc/opiekeys
[root@MergePoint5224 /]# chmod 0644 /mnt/opie/etc/opiekeys
[root@MergePoint5224 /]# chown root:bin /mnt/opie/etc/opiekeys
To configure OTP authentication for modem or GSM phone card dial-ins:
1. Log into the console as root.
2. Use
vi or another text editor to open the /etc/mgetty.login.config file for editing and find this
entry: *
- - /bin/login.
3. Replace login with opielogin.
4. Save and quit the file.
To configure OTP authentication for SSH or console logins:
This procedure manually configures Telnet or SSH logins to the console with either the OTP or
OTP/Local authentication method, and it also changes the targets of the symbolic links /etc/pam.d/
sshd and /etc/pam.d/login to /etc/pam.d/[otp,otplocal].
NOTE: The Web Manager does not support OTP authentication.
[root@MergePoint5224 /]# vi /etc/mgetty.login.config
...
* - - /bin/login @
*
- - /bin/opielogin @
Komentáře k této Příručce