Setting S/Key and HTTP Passwords

If the firewall has a trusted friend who is on the outside network, that user will have to use an S/Key password to log on. Similarly, if you have service entries with S/Key user identification, you will need to assign S/Key passwords to the users who can access the service. S/Key passwords are multi-word one-time passwords that can be reused 99 times and must then be changed. Users who have access to proxy HTTP can use HTTP authentication, which is handled by most web browser clients.

  

Figure 4.51: The Change Password Setup Screen

The Change Password Setup Screen (Figure 4.51) allows an S/Key or HTTP password to be set for a particular user. To set an S/Key password, type the new password and then press F5 to save it. To set an HTTP password, type the new password and then press F6 to save it.

The screen will not allow you to view the current password, only to establish a new password. S/Key passwords should more than one word in length to help prevent dictionary attacks.