Password-Control Enable - H3C MSR Series Command Reference Manual

type-length type-length: Specifies the minimum number of characters that are from each type in the
password. The value range for the type-length argument is 1 to 63 in non-FIPS mode, and 1 to 15 in
FIPS mode.
Usage guidelines
The password composition policy depends on the view:
•
The policy in system view has global significance and applies to all user groups.
•
The policy in user group view applies to all local users in the user group.
•
The policy in local user view applies only to the local user.
A password composition policy with a smaller application scope has higher priority. The system
prefers to use the password composition policy in local user view for a local user.
•
If no policy is configured for the local user, the system uses the policy for the user group to
which the local user belongs.
•
If no policy is configured for the user group, the system uses the global policy.
The product of the minimum number of character types and minimum number of characters for each
type must be smaller than the maximum length of passwords.
Examples
# Specify that all passwords must each contain a minimum of four character types and a minimum of
five characters for each type.
<Sysname> system-view
[Sysname] password-control composition type-number 4 type-length 5
# Specify that passwords in user group test must contain a minimum of four character types and a
minimum of five characters for each type.
[Sysname] user-group test
[Sysname-ugroup-test] password-control composition type-number 4 type-length 5
[Sysname-ugroup-test] quit
# Specify that the password of device management user abc must contain a minimum of four
character types and a minimum of five characters for each type.
[Sysname] local-user abc class manage
[Sysname-luser-manage-abc] password-control composition type-number 4 type-length 5
Related commands
display local-user
display password-control
display user-group
password-control composition enable

password-control enable

Use password-control enable to enable the password control feature globally.
Use undo password-control enable to disable the password control feature globally.
Syntax
password-control enable
undo password-control enable
Default
In non-FIPS mode:
414