Table of Contents
Advertisement
password
Syntax
password [password] [hash | hash2]
Context
config>system>security>user
Description
This command configures the user password for console and FTP access.
The use of the hash keyword sets the initial password when the user is created or modifies the
password of an existing user and specifies that the given password was hashed using hashing algorithm
version 1.
The use of the hash2 keyword specifies that the given password is already hashed using hashing
algorithm version 2. A semantic check is performed on the given password field to verify that it is a
valid hash2 key to store in the database.
The password is stored in an encrypted format in the configuration file when specified. Passwords must
be encased in double quotes (" ") at the time of the password creation if they contain any special
characters. The double quote character (") is not accepted inside a password. It is interpreted as the start
or stop delimiter of a string.
For example:
config>system>security# user testuser1
config>system>security>user$ password "zx/Uhcn6ReMOZ3BVrWcvk." hash2
config>system>security>user# exit
config>system>security# info
-------------------------------------
...
...
-------------------------------------
config>system>security#
Parameters
password — the password for the user that must be entered by this user during the login procedure.
7705 SAR OS System Management Guide
user "testuser1"
password "zx/Uhcn6ReMOZ3BVrWcvk." hash2
exit
The minimum length of the password is determined by the minimum-length command. The
maximum length can be up to 20 characters if unhashed and 32 characters if hashed or 54
characters if hash2. The complexity requirements for the password are determined by the
complexity command.
Passwords that contain special characters (#, $, spaces, etc.) must be enclosed within double
quotes.
For example:
config>system>security>user# password "south#bay?"
The question mark character (?) cannot be directly inserted as input during a Telnet
connection because the character is bound to the help command during a normal Telnet/
console connection.
To insert # or ? characters, they must be entered inside a notepad or clipboard program and
then cut and pasted into the Telnet session in the password field that is encased in the double
quotes as delimiters for the password.
Security
117
Advertisement
Table of Contents
