HP 3500yl Series Access Security Manual page 62

Configuring Username and Password Security
Configuring Local Password Security
2-8
The SPACE character is allowed to form a username or password pass-phrase.
The username must be in quotes, for example "The little brown fox". A space
is not allowed as part of a username without the quotes. A password that
includes a space or spaces should not have quotes.
Restrictions for the Setmib Command
Usernames and passwords can be set using the CLI command setmib. They
cannot be set using SNMP.
Quotes are permitted for enclosing other characters, for example, a
■
username or password of abcd can be enclosed in quotes "abcd"
without the quotes becoming part of the username or password itself.
Quotes can also be inserted between other characters of a username
or password, for example, ab"cd. A pair of quotes enclosing
characters followed by any additional characters is invalid, for
example, "abc"d.
Spaces are allowed in usernames and passwords. The username or
■
password must be enclosed in quotes, for example, "one two three".
A blank space or spaces between quotes is allowed, for example, " ".
Additional Restrictions
Some authentication servers prevent the usage of special symbols such as the
backslash (\) and quotes (""). The switch allows the use of these symbols in
configurable credentials, but using them may limit access for some users who
may use different client software. Please refer to the vendor's documentation
for specific information about these restrictions.
Operating Notes on Upgrading or Downgrading Software Versions
When you update software from a version that does not support long pass-
words to a version that supports long passwords, the existing usernames and
passwords continue to be there; no further action is required.
Before downgrading to a software version that does not include this feature,
use one of the following procedures:
1. Reset the username and/or password to be no more than 16 characters
in length, and without any special characters, using the CLI command
password or the equivalent in the WebAgent. Then execute a CLI write
memory command (required if the include-credentials feature has ever
been enabled).