HP ProCurve 9304M Security Manual page 34

Security Guide for ProCurve 9300/9400 Series Routing Switches
Syntax: show users
Note About Changing Local User Passwords
Starting in release 07.8.00, the HP device stores not only the current password configured for a local user, but the
previous two passwords configured for the user as well. The local user's password cannot be changed to one of
the stored passwords.
Consequently, if you change the password for a local user, you must select a password that is different from the
current password, as well as different from the previous two passwords that had been configured for that user.
For example, say local user waldo originally had a password of "whereis", and the password was subsequently
changed to "whois", then later changed to "whyis". If you change waldo's password again, you cannot change it to
"whereis", "whois", or "whyis".
The current and previous passwords are stored in the device's running-config file in encrypted form. For example:
ProCurveRS# show run
...
username waldo password 8 $1$Ro2..Ox0$udBu7pQT5XyuaXMUiUHy9. history
$1$eq...T62$IfpxIcxnDWX7CSVQKIodu. $1$QD3..2Q0$DYxgxCI64ZOSsYmSSaA28/
...
In the running-config file, the user's previous two passwords are displayed in encrypted form following the history
parameter.
USING THE WEB MANAGEMENT INTERFACE
To configure a local user account using the Web management interface, use the following procedure.
NOTE: Before you can add a local user account using the Web management interface, you must enable this
capability by entering the password any command at the global CONFIG level of the CLI.
1. Log on to the device using a valid user name and password for read-write access.
2. Select the Management link from the System configuration panel to display the Management configuration
panel.
3. Select the User Account link.
• If any user accounts are already configured on the device, the account information is listed in a table.
Select the Add User Account link to display the following panel. Notice that the password display is
encrypted. If you want the passwords to be displayed in clear text, you can use the CLI to disable
encryption of password displays. See "Disabling Password Encryption" on page 2-16.
• If the device does not have any user accounts configured, the following panel is displayed.
4. Enter the user name in the User Name field. The name cannot contain blanks.
5. Enter the password in the Password field. The password cannot contain blanks.
6. Select the management privilege level from the Privilege pulldown menu. You can select one of the following:
2 - 18 June 2005