Password-Control Composition - HP 5120 SI series Command Reference Manual

Related commands: display password-control.
Examples
# Configure the password complexity checking policy, refusing any password that contains the username
or the reverse of the username.
<Sysname> system-view
[Sysname] password-control complexity user-name check

password-control composition

Syntax
password-control composition type-number type-number [ type-length type-length ]
undo password-control composition
View
System view, user group view, local user view
Default level
2: System level
Parameters
type-number type-number: Specifies the minimum number of character types that a password must
contain. The value range for the type-number argument is 1 to 4 in non-FIPS mode and fixed at 4 in FIPS
mode.
type-length type-length: Specifies the minimum number of characters that are from each character type.
The value range for the type-length argument is 1 to 63.
Description
Use the password-control composition command to configure the password composition policy.
Use the undo password-control composition command to restore the default.
In non-FIPS mode, by default, the global password composition policy is as follows: A password must
contain at least one type of characters from uppercase letters, lowercase letters, digits or special
characters (see "password"), and each type contains at least one character.
In FIPS mode, by default, the global password composition policy is as follows: A password must contain
four types of characters from uppercase letters, lowercase letters, digits and special characters, and each
type contains at least one character.
In both FIPS and non-FIPS modes, the default password composition policy for a user group is the same
as the global policy, and the default policy for a local user is the same as that for the user group to which
the local user belongs.
The settings in system view have global significance and apply to all user groups, the settings in
•
user group view apply to all local users in the user group, and the settings in local user view apply
to only the local user.
• A password composition policy with a smaller application range has higher priority. The priority in
descending order is: policy for a local user, policy for a user group, global policy.
Related commands: display password-control, local-user, and user-group.
187