Go to main content

Managing Authentication in Oracle® Solaris 11.4

Exit Print View

Updated: August 2019
 
 

How to Configure OTP

Before You Begin

You must become an administrator with the Software Installation rights profile to install the otp package. You must become an administrator with the OTP Auth Manage All Users rights profile to enable you to manage OTP. The root role has all of these rights. For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.4.

  1. Ensure that the login server is a client of a clock synchronization service.

    For instructions, see Managing Clock Synchronization in Oracle Solaris 11.4.

  2. Ensure that the otp package is installed on the login server.
    login-server $ pkg search -H -o pkg.name -l \<otp\>
    pkg:/system/security/otp
  3. (Optional) Determine whether the defaults are sufficient for your site policy.
    $ otpadm get
                    mode=timer
               algorithm=hmac-sha1
                  digits=6
                    ...
  4. If users should use different values, send them instructions.