
116 MergePoint 5224/5240 Service Processor Manager Installer and Administrator Guide
1. Change to the /etc/pam.d directory.
[root@MergePoint5224 /]# cd /etc/pam.d
2. To specify OTP for logins to the console or through telnet, change the target of the symbolic
link login to otp or otplocal.
CAUTION: If OTP is chosen, users (even root) may be locked out if not configured properly. You can test
whether OTP is working by first changing only the symbolic link for login as shown in the following screen
example and then attempting access using telnet. If the telnet login using an OTP password succeeds, you can
safely change the method for ssh logins as described in step 3.
[root@MergePoint5224 /]# ln -sf /etc/pam.d/otp login
-or-
[root@MergePoint5224 /]# ln -sf /etc/pam.d/otplocal login
3. To specify OTP for ssh logins, change the target of the symbolic link sshd to otp or otplocal.
[root@MergePoint5224 /]# ln -sf /etc/pam.d/otp sshd
-or-
[root@MergePoint5224 /]# ln -sf /etc/pam.d/otplocal sshd
NOTE: The cli utility and the Web Manager may not display the correct authentication information when the
symbolic links are changed manually.
To configure OTP authentication for a device:
This procedure manually configures a previously
configured device or devices to use the OTP or
OTP/Local authentication method.
1. Log into the appliance’s console as root.
2. Open the /etc/onboard_server.ini file for editing.
3. For any configured device, set the authtype to be either otp or otplocal.
authtype = otp
-or-
authtype = otplocal
4. Save and quit the file.
How Users are Registered with OTP and Obtain OTP Passwords
All users who need to use OTP authentication must have a local account on the SP manager, must
be registered with the OTP system and must be able to obtain OTP passwords.
The OPIE commands in the following bulleted list must be executed with the
-c option while the
user is logged in locally through the console port:
Commentaires sur ces manuels