Cyclades AlterPath BladeManager Manuál s instrukcemi stáhnout pdf (Strana 131)

Chapter 6: Administration Tasks Not Performed in the Web Manager 117

• The opiepasswd command

• The opiekey command to generate OTP passwords

The requirement for local logins through the console port is enforced for regular users because

running the commands through a dial

-in or other unsecure connection may expose the user

passwords, pass phrases and OTP passwords. The root user can execute these commands without

the

-c option while logged in over ssh because ssh provides a secure path. These commands should

never be executed over a dial

-in or Telnet connection:

OTP passwords are generated in one of the two following ways:

• By the user or administrator executing the opiekey command: If opiekey command is executed

by an administrator on behalf of a user, the administrator must give the OTP username and the

user’s secret pass phrase to each user along with the generated OTP passwords.

• By the user with a password generating device: If a user has a password generating device,

then the user generates the OTP password when challenged at login using the username and

secret pass phrase, along with the seed and sequence number that are displayed along with the

OTP challenge.

To register and generate OTP passwords for users:

The following procedure shows an example of an administrator logging in locally through the

console port, registering a user and generating OTP passwords for the user. The example shows

using cli to add the user, but any of the tools available for adding users, including the Web

Manager, may be used to configure the user account beforehand.

1. Log into the appliance console as root.

2. Make sure each user authorized for dial

-ins has a local account on the SP manager.

If using the cli utility to add the user, perform the following steps:

a. Add the user and set the user’s password.

The following screen example shows using the

cli utility to add user joe and set the user’s

password to joes_passwd.

b. If the user must access devices through the SP manager, add the user as a spmanager user.

[root@MergePoint5224 /]# cli

cli> add user joe

cli> set user joe passwd joes_passwd

1 2 ... 126 127 128 129 130 131 132 133 134 135 136 ... 239 240

Žádné komentáře

Cyclades AlterPath BladeManager Manuál s instrukcemi Strana 131