System information

Administration Tasks Not Done in the Web Manager 95
Configuring the User’s Console Login Menu
In the following screen example, the “One-time_ Password” menu
option is added with the keyword o
pie, which is used to define the submenu
that provides options for running commands.
Figure 2-2: One-time Password Menu Option Added to menu.ini
T To Add One-time Password Options to the
Users’ Login Menu
This procedure creates new menu items to allow regular users to run
commands from the users’ login menu to register themselves to the OPIE
database and to obtain OTP passwords.
This procedure is only useful if the following conditions both are true:
An OnBoard administrator has performed the prerequisite configuration
tasks to enable one-time password (OTP) authentication as described in
Table 1-4, “Tasks for Configuring OTP Authentication for Dial-ins,” on
page 10. Otherwise, the OTP database would not be available, and the
menu options would not work.
Users authorized for dial-ins are also able to log into the OnBoard’s
CONSOLE port, because opie* commands check to make sure the
commands are being run through a CONSOLE port login.
# $Id: menu.ini,v 1.1 2005/06/23 21:37:07 scott Exp $
# Default menu for restricted shells
[main]
Access_Servers = /bin/onbdshell
Change_Password = /usr/bin/passwd
One-time_Password_Menu = opie
...
[opie]
Register_with_OTP_Database = /usr/bin/opiepasswd -c
Get_OTP_Passwords = /usr/bin/opiekey -c -n 6