Avocent Cyclades ACS 5000 SERIES, Command Reference Manual, Page: 57 / 152

Chapter 3: Security 49
Re-enter new password: users_passwd
3. Execute the opiepasswd command to register a user and generate a default OPIE key. This
command initializes the system information to allow using OPIE login.
NOTE: You may use the -c option (console mode) if you have secure access to the console server. Running
OPIE commands through an unsecured connection may reveal your password and compromise security.
Using
opiepasswd
from the console
The following information displays when you execute the opiepasswd command from the console
with a -c option. The system prompts you to enter a new secret pass phrase and proceeds to
generate default OPIE sequence number 499 and a key from the first two letters of the hostname
(kv), a pseudo random number (6178) and a password comprised of six words. In the following
example, 499 KV6178 is the OPIE key and the password is COMB YANK BARD SLOT
AS USER.
opiepasswd -c peter
Adding peter:
Only use this method from the console; NEVER from remote. If you are
using telnet, xterm, or a dial-in, type ^C now or exit with no
password.
Then run opiepasswd without the -c parameter.
Using MD5 to compute responses.
Enter new secret pass phrase: peters passphrase
Again new secret pass phrase: peters passphrase
ID peter OTP key is 499 KV6178
COMB YANK BARD SLOT AS USER
Using opiepasswd from remote
When you execute the opiepasswd command securely from a remote system, you need an OTP
generator (calculator) to obtain the OTP password. This initial sequence and its password are used
to generate the hash number stored in the OTP database. Contact your system administrator to
obtain an OTP calculator.
# opiepasswd john
Adding john:
You need the response from an OTP generator.
New secret pass phrase:
otp-md5 499 KV3881
Response:JOE FEE JUTE HARK BANE FAR
ID OTP key is 499 KV3881
JOE FEE JUTE HARK BANE FAR