Bay Networks 5390, Administering, Page: 484 / 888

A15-64 893-741-B
Using Model 5390 Security
Using SafeWord Security
Enigma Logic’s SafeWord software verifies the identity of CLI users to permit access to protected
systems. When you install SafeWord version 4.x on a central network server and link SafeWord to
erpcd, SafeWord provides and authenticates fixed or dynamic, single-use passwords.
You can use SafeWord software for:
• SLIP, PPP, IPX, and ARAP sessions only when you start a session from a CLI port. IPX users
must connect from the FastLink II software in terminal mode. For more information about
IPX sessions, see SafeWord Authentication on page A15-37.
• The ARAP Remote Access client’s CCL scripts in versions 1.0 and 2.0 if you do not use a
SafeWord challenge as part of a dynamic password.
• Macintosh or dial-back users only when the SafeWord user name matches the user name listed
in the acp_user_info file.
The Model 5390 server supports SafeWord for user authentication only. Therefore, when you dial
in to the network through the Model 5390 server, or dial out from the Model 5390 server (for
example, if you telnet to a port in slave mode), the Model 5390 server does not display the SafeWord
Failed Access Report. In addition, the Model 5390 server does not run the user’s SafeWord execute
program at the end of the authentication process.
Installing SafeWord
To integrate SafeWord into ACP, you must make changes in the erpcd utility. You must install
SafeWord:
• On a host running erpcd.
• On a UNIX system that has a development environment and compile the host tools (as
opposed to using the binaries from the Annex software distribution tape).
• In a directory named /safelog and Annex software in the
/usr/annex directory. If you do not use these directory names, you must substitute pathnames.
Integrating SafeWord into ACP
Before you use SafeWord, you need to integrate SafeWord into ACP: