Passwords - IBM Eserver pSeries 670 User Manual

Passwords

Passwords can be any combination of up to eight alphanumeric characters. You can
enter longer passwords, but the entries are truncated to include only the first eight
characters. The privileged access password can be set from service processor menus
or from System Management Services (SMS) utilities (see Chapter 4, "Using System
Management Services" on page 59). The general access password can be set only
from service processor menus.
For security purposes, the service processor counts the number of attempts to enter
passwords. The results of not recognizing a password within this error threshold are
different, depending on whether the attempts are being made locally (at the server) or
remotely (through a modem). The error threshold is three attempts.
If the error threshold is reached by someone entering passwords at the server, the
service processor commands the server to resume the initial program load (IPL). This
action is taken based on the assumption that the server is in an adequately secure
location with only authorized users having access. Such users must still successfully
enter a login password to access AIX.
If the error threshold is reached by someone entering passwords remotely, the service
processor commands the server to power off to prevent potential security attacks on the
server by unauthorized remote users. The following table lists what you can access with
the privileged-access password and the general-access password.
Privileged
Access
Password
Eserver pSeries 670 User's Guide
20
General
Access
Password
None None
Set None
Set Set
Resulting Menu
Service processor MAIN MENU displays.
Users with the password see the service processor
MAIN MENU. Users without password cannot log in.
Users see menus associated with the entered
password.