Bay Networks 5390 Administering page 432

Using Model 5390 Security
The acp_passwd file uses the same format as the /etc/passwd file. The easiest way to create this
password file is to copy the /etc/passwd file to acp_passwd. One advantage to creating the
acp_passwd file this way is that you can merge /etc/passwd files from different hosts into one file
on the security server, thus allowing you to create a network-wide password file.
To have ACP prompt for a port password along with the user name and password, create an entry
in the acp_passwd file as follows:
<Annex IP address>.<port_number>::0:0:<test>::
In the following example, the acp_passwd entry for the Model 5390 server on port 1 called Ollie,
with the IP address of 132.245.33.11, is:
132.245.33.11.1::0:0:Ollie Dialin modem port password::
After creating this entry, use the ch_passwd command to enter the port password:
% ch_passwd 132.245.33.11.1
New password: <password>
The ACP prompts appear as follows:
Annex username:
Annex password:
Port password:
A15-12
NOTE: If you are using a System V.4 host, use the /etc/shadow file
rather than the /etc/passwd file. Not all password files work with ACP.
For example, you could not merge SCO UNIX password files into the
acp_passwd file . Non-superusers can change their passwords only if the
username in the acp_passwd file matches the username in the
/etc/passwd (or /etc/shadow) file on the host.
NOTE: This port password is independent of the port parameter
port_password. The port parameter is used only for local security.
893-741-B