H3C S9500 Series Operation Manual page 45

Operation Manual – Getting Started
H3C S9500 Series Routing Switches
Deleting history password records
After the configuration, you can carry out display password-control in any view to
view the password control information for all users, including the enabled/disabled state
of password aging, the aging time, the enabled/disabled state of the minimum
password length limitation and the configured minimum password length, the
enabled/disabled state of history password recording, the alert time before password
expiration, the timeout time for password authentication, the maximum number of
password input attempts, the maximum number of history password records, the
processing mode after failed password input attempts, the time when the password
history was last cleared, and so on.
If a user fails to provide the correct password after the allowed number of attempts, the
system adds the user to the blacklist. To view the names and the IP addresses of such
users, carry out display password-control blacklist in any view.
Table 6-1 Basic configuration tasks of password control
Operation
Enter system view
Enter local user view
Configure system login
password
Enable
control
Configure
password parameters
Configure
password parameters
system-view
local-user username
password
password password-control { aging |
length | history } enable
password-control { aging
aging-time | length length |
login-attempt login-times |
history
system
alert-before-expire alert-time
|
authentication-timeout
authentication-timeout
exceed { lock | unlock |
locktime time } }
password-control
super
{ aging aging-time | length
length }
6-3
Chapter 6 Password Control Configuration
Command
|
max-record-num
|
super
Description
-
-
Input the password twice
as prompted by the
system, ensuring the
same password
inputted at both time
By default, password
control is enabled
Refer to the detailed
description in the
following paragraphs
about the configuration
of system password
parameters
The commands
password-control
aging aging-time and
password-control
length length can also
be used in the local user
mode
By default, the aging
time of the super
password is 90 days,
and the minimum length
of the super password is
10 characters.
is