Unsuccessful Login Attempt Handling - Nortel Meridian Meridian 1 Implementation Manual

Table 52
Access permissions (Part 2 of 2)
Access type Description of permissions
FTP 1
(server access)
2
3
General 1
2
3
4

Unsuccessful login attempt handling

Procedure 38 shows how the system handles unsuccessful login
attempts.
Procedure 38
Unsuccessful login operation
1
2
3
Meridian Integrated Conference Bridge
Remote access using FTP requires a dedicated login name and password. The
name and password can contain letters and digits.
The system records every successful login as an informational message in the
error log. The CLI terminal prints this message.
The system times out and closes the session after a period of inactivity. The
administrator defines the time-out parameter.
The system always encrypts files containing passwords.
An administrator defines the minimum length of the login name and password.
The system enforces the minimum requirement when a user changes their
login name or password. This rule applies to all the passwords that this table
describes. It does not apply to the conference and chairperson passwords set
up in the BUI scheduling window.
The maximum password length is 16 characters, which is hard-coded.
The IP/LAN connectivity provides access through the LAN using HTTP, Telnet
and FTP only.
No action is required for this procedure. However, observe the activities in the
following steps and report any system discrepancies to your support
technician.
For each faulty login, the system issues a message in the error log and the
CLI. This applies to all access types: BUI; TUI; CLI; and Telnet. The following
is an example of the message format (for more information on error
messages, see "Error message handling" on page
0024: WARNING MNGMMI114 12-06 15:42:55:612 FTP login FAILED from
152.217.111.234
The MICB counts consecutive login attempts. When the count reaches the
"maximum faulty login attempts" parameter set by the administrator, the
system performs the following:
a BUI user and administrator access – After five consecutive faulty login
attempts in which the login name is correct, but the password is wrong,
the system blocks this login name. The administrator must reset the
name to resume normal login operation.
b CLI access – After the maximum allowed login attempts, the system
blocks the CLI for a period of time. The administrator can define the
blocking time period.
Page 195 of 208
154).
Service Implementation Guide