System information

Specifying the Location for the OTP Databases
66 AlterPath OnBoard Administrator’s Guide
The following screen example uses nfs_server.cyclades.com as
the NFS server name and /home/opie as the exported directory’s
name.
5. Do the following to create the /etc directory on the mounted directory
and to create an opiekeys file.
T To Enable OTP Authentication for OnBoard
SSH or Console Logins
Do this procedure to manually configure dTelnet or ssh logins to the
console with either the OTP or OTP/Local authentication method. This
procedure shows how to change the targets of the symbolic links /etc/
pam.d/sshd and /etc/pam.d/login to /etc/pam.d/
[otp,otplocal].
Note: The Web Manager does not support OTP authentication.
1. Change to the /etc/pam.d directory.
2. To specify OTP for logins to the console or through telnet, change the
target of the symbolic link login to otp or otplocal
Caution! If OTP is chosen, users (even root) may be locked out if not
configured properly. You can test whether OTP is working by first changing
only the symbolic link for login as shown in the following screen example
and then attempting access using telnet. If the telnet login using an
[root@OnBoard /]# mount -t nfs nfs_server.cyclades.com:/home/
opie /mnt/opie
[root@OnBoard /]# mkdir /mnt/opie/etc
[root@OnBoard /]# touch /mnt/opie/etc/opiekeys
[root@OnBoard /]# chmod 0644 /mnt/opie/etc/opiekeys
[root@OnBoard /]# chown root:bin /mnt/opie/etc/opiekeys
[root@OnBoard /]# cd /etc/pam.d