Silicon Graphics Gauntlet, Administrator'S Manual, Page: 208 / 306

182
Chapter 18: Managing User Authentication
To create a user, follow these steps:
1. Enter the user ID and full user name.
2. If you want to assign the user to a group, enter the name of the group. If the group
does not exist, creating the user creates the group. If a group administrator creates
users, those users will inherit the group information.
3. Enter the strong-authentication protocol for this user. Current options are selectable
from the selection box.
Warning:
Do not use the reusable passwords option for authentication from
untrusted networks. Reusable passwords are vulnerable to password sniffers and
are easy to crack. This feature is provided for convenience and audit capability
only.
4. Enter the authentication information for the user if applicable. (In some cases, this
will be a password.)
5. Verify the authentication information by entering it again.
6. Make the information active by saving these changes (in gauntlet-admin).
Creating Default Users
Creating a default user allows you to authenticate users without manually creating
entries for every user in the Gauntlet authentication database. Note that this option is
only available for:
• Safeword Authentication Server
• SecurID
You can only have one default user. When a user logs in and the authentication server
does not find the information in the Gauntlet authentication database, the authentication
server sends the user information to the remote authentication server. The
authentication server also creates a record for that user in the Gauntlet authentication
database.
To create a default user:
1. Enter default as the userid.
2. Enter the name of a group to assign the user to a group, if desired. If the group
does not exist, creating the user creates the group. If a group administrator creates
users, those users will inherit the group information.