H3C S6812 Series Command Reference Manual page 1915

Usage guidelines
If you do not specify any parameters, this command displays information about all users in the
password control blacklist.
The users' IP addresses and user accounts are added to the password control blacklist when the
users fail authentication. You can use this command to view information about blacklisted FTP and
virtual terminal line (VTY) users.
The password control blacklist will not blacklist Web users if they fail login authentication. Users
accessing the system through the console interface are not blacklisted either, for the following
reasons:
•
The system is unable to obtain the IP addresses of these users.
•
These users are privileged and, therefore, relatively secure to the system.
Examples
# Display password control blacklist information.
<Sysname> display password-control blacklist
Blacklist items matched: 2.
Username: test
IP: 192.168.44.1
Username: jj
IP: 192.168.44.3
Table 2 Command output
Field
Blacklist items matched
IP
Login failures
Lock flag
password-control { aging | composition | history | length }
enable
Use password-control { aging | composition | history | length } enable to enable the password
expiration, composition restriction, history, or minimum length restriction feature.
Use undo password-control { aging | composition | history | length } enable to disable a
password control feature.
Syntax
password-control { aging | composition | history | length } enable
undo password-control { aging | composition | history | length } enable
Default
The password control features (aging, composition, history, and length) are all enabled.
Views
System view
Login failures: 1
Login failures: 3
Description
Number of blacklisted users.
IP address of the user.
Number of login failures.
Whether the user account is locked for the user:
•
unlock—Not limited.
•
lock—Disabled temporarily or permanently, depending on the
password-control login-attempt command.
3
Lock flag: unlock
Lock flag: lock