Bay Networks 6300, Supplement Manual

Page: 274 / 593

Remote Annex 6300 Supplement to the Remote Annex Administrator’s Guide for UNIX
Chapter 15 Using RA 6300 Security
A-246
Book A
Each field in the entry must be separated by the colon (:) character; a
space may follow but not precede the colon. The syntax for
profile_criteria is:
keyword=value[;keyword=value;...]
If profile criteria are omitted, the specified regime applies to any user
logging in under any circumstances. Profile criteria are explained in
Overview of Security Profile Criteria on page 15-236. Valid regimes are
explained in Table A-24 .
The password_filename field is valid only for the acp and kerberos
regimes. If you specify the acp or kerberos regime but supply no
password_filename, the default is used (see
Table A-24 ). If the file is not
found, an error message is logged and access is denied.
Table A-24. Authentication Regimes
Regime Description
acp ACP authentication, using the password file you specify.
Default is the acp_passwd file.
safeword SafeWord authentication.
kerberos Kerberos authentication, using the ticket-directory prefix you
specify. Default is /temp/tkt_erpcd_.
native Authentication via the native operating system of the security
server. For UNIX, native means the
/etc/passwd file is used for authentication.
none No authentication is performed; the user is unconditionally
authenticated.
securid SecurID authentication.