Configuring Password Aging - 3Com 400 Family Configuration Manual

290 C 13: P
HAPTER ASSWORD
Configuring Password
Aging
C C O
ONTROL ONFIGURATION PERATIONS
minimum password length (if available), the enable/disable state of history
password recording, the procession mode for login attempt failures, and the time
when the password history was last cleared.
If all the password attempts of a user fail, the system adds the user to the blacklist.
You can execute the display password-control blacklist command in any view to
check the names and the IP addresses of such users.
Table 336 Configure Password Aging
Operation
Enter system view
Enable password aging
Set an aging time for super
passwords
Enable the system to alert
users to change their
passwords when their
passwords will soon expire,
and specify how many days
ahead of the expiration does
the system alert the users.
To cancel the above configurations, you can use the corresponding undo
commands.
CAUTION: You can configure the password aging parameters when password
aging is not yet enabled, but these parameters will not take effect.
After password aging is enabled, the device will decide whether the user password
ages out when a user logging into the system is undergoing the password
authentication. This has three cases:
The password has not expired and its remaining usable time is greater than the
■
configured alert time. In this case, the user log in successfully.
The password has not expired but its remaining usable time is no more than
■
the configured alert time. In this case, the system alerts the user to the
remaining time (in days) before the password expires and prompt the user to
change the password.
If the user chooses to change the password and change it successfully, the
■
system saves the new password, restarts the password aging procedure,
and at the same time allows the user to log in.
If the user chooses to change the password but fails to do so, or the user
■
chooses not to change the password, the system just allows the user to log
in.
The password has already expired. In this case, the system alerts the user to the
■
expiration, requires the user to change the password, and requires the user to
re-change the password if the user input an inappropriate password or the two
inputs are inconsistent.
Command
system-view
password-control
aging enable
password-control
super aging
aging-time
password-control
alert-before-expire
alert-time
Description
By default, password aging is
enabled.
By default, it is 90 days.
By default, users are alerted
seven days ahead of the
password expiration.