I'm looking for a way to allow users to change their own VPN (dynamic VPN) password on a Juniper SRX650 running 12.1X47-D35. My problem is if I log in via cli and type out the command "set access profile bla-profile client bla-client firewall-user password " and have the user finish the command by typing in their password, it shows as they typed it in the terminal window. So then if I take control of the terminal to commit I will see their password. I really don't want the users to commit changes, plus this starts to instruct users on typing multiple commands... I have the SRX650 running in HA, so I can't have the user make the change, close the terminal window, then log back in and commit the changes. I've tried to find the users in J-Web, but I'm failing at finding where to edit the users password. I see the access profile with list of users, just can't figure out how to change the password. I believe J-Web might be able to accomplish my needs, but I fail at the GUI....
Any suggestions?