Passwords - IBM Enterprise Server S80 User Manual

Passwords

Passwords can be any combination of up to 8 alphanumeric characters. You can enter
longer passwords, but the entries are truncated to include only the first 8 characters.
The privileged-access password can be set from the service processor menus or from
System Management Services (SMS) utilities (see "Chapter 4. System Management
Services" on page 95). The general-access password can be set only from service
processor menus.
For security purposes, the service processor counts the number of attempts to enter
correct passwords. The results of not recognizing a correct password within this error
threshold are different, depending on whether the attempts are being made locally (at
the server) or remotely (through a modem). The error threshold is 3 attempts.
If the error threshold is reached by someone entering passwords at the server, the
service processor commands the server to resume the initial program load (IPL). This
action is taken based on the assumption that the server is in an adequately secure
location with only authorized users having access. Such users must still successfully
enter a login password to access AIX.
If the error threshold is reached by someone entering passwords remotely, the service
processor commands the server to power down to prevent potential security attacks on
the server by unauthorized remote users. The following illustrates what you can access
with the privileged-access password and the general-access password.
Privileged
Access
Password
None
None
v Change Privileged Access Password
Set or change the privileged-access password. It provides the user with the capability
to access all service processor functions. This password is usually used by the
system administrator or root user.
v Change General Access Password
Set or change the general-access password. It provides limited access to service
processor menus, and is usually available to all users who are allowed to power on
the server, especially remotely.
Note: The general-access password can only be set or changed while the
66
S80 and S85 User's Guide
General
Access
Password
None
Set
Set None
Set Set
privileged-access password is set.
Resulting Menu
Service processor MAIN MENU displayed
Users with the password see the GENERAL USER MENU.
Users without the password see the service processor MAIN
MENU.
Users with the password see the service processor MAIN
MENU. Users without password see the GENERAL USER
MENU.
Users see menus associated with the entered password