Avaya DEFINITY Server CSI Maintenance Manual page 53

Logging On/Off
The password for each login can be aged starting with the date the password was
created, or changed, and continuing for a specified number of days (1 to 99). The
user is notified at the login prompt, 7 days before the password expiration date,
that the password is about to expire. When the password expires the user is
required to enter a new password into the system before logging in. If a login is
added or removed, the "Security Measurement" reports are not updated until the
next hourly poll, or clear measurements security-violations is entered. Once a
non-super-user has changed the password, the user must wait 24 hours to
change the password again.
Security is enhanced by providing a logoff notification screen to a system
administrator at log off while either the facility test call or remote access features
are still administered. The administrator can be required to acknowledge the
notification before completing the logoff process. Logoff notification is
administered on the Login Administration screen.
Software releases are delivered to the customer with one customer "super-user"
login/password defined. The customer is required to administer additional
login/passwords as needed. The super-user login has full customer permissions
and can customize any login created.
Login permissions for a specified login can be set by the super-user to block any
object that may compromise switch security. Up to 40 administration or
maintenance objects commands can be blocked for a specified login in.
System-wide commands are grouped into three command categories. Each of the
three command categories has a group of command subcategories listed under
them, and each command subcategory has a list of command objects that the
commands acts on. A super-user can set a users permissions to restrict or block
access to any command in these categories. These categories appear on the
Command Permissions Categories screen. The three main categories are:
Common Commands
— Display Administrative and Maintenance Data
— System Measurements
Administration Commands
— Administer Stations
— Administer Trunks
— Additional Restrictions
— Administer Features
— Administer Permissions
Maintenance Commands
— Maintain Stations
— Maintain Trunks
— Maintain Systems
— Maintain Switch Circuit Packs
— Maintain Process Circuit Packs
555-233-119 Issue 5 October 2002
53