Passwords - IBM p 655 series User Manual

Passwords

Passwords can be any combination of up to eight alphanumeric characters. You can enter longer
passwords, but the entries are truncated to include only the first eight characters. The privileged access
password can be set from service processor menus or from System Management Services (SMS) utilities
(see Chapter 5, "Using System Management Services," on page 53). The general access password can be
set only from service processor menus.
For security purposes, the service processor counts the number of attempts to enter passwords. The
results of not recognizing a password within this error threshold are different, depending on whether the
attempts are being made locally (at the server) or remotely (through a modem). The error threshold is
three attempts.
If the error threshold is reached by someone entering passwords at the server, the service processor
commands the server to resume the initial program load (IPL). This action is taken based on the
assumption that the server is in an adequately secure location with only authorized users having access.
Such users must still successfully enter a login password to access the operating system.
If the error threshold is reached by someone entering passwords remotely, the service processor
commands the server to power off to prevent potential security attacks on the server by unauthorized
remote users. The following table lists what you can access with the privileged-access password and the
general-access password.
Privileged Access General Access
Password
None
Set
Set
v Change Privileged-Access Password
Set or change the privileged-access password. It provides the user with the capability to access all
service processor functions. This password is usually used by the system administrator or root user.
v Change General-Access Password
Set or change the general-access password. It provides limited access to service processor menus, and
is usually available to all users who are allowed to power on the server, especially remotely.
Note: The general-access password can only be set or changed after the privileged access password
is set.
v Enable/Disable Console Mirroring
This function is not available on this system.
v Start Talk Mode
This function is not available on this system.
v OS Surveillance Setup Menu
Note: This option is disabled in partitioned systems.
This menu can be used to set up operating system (OS) surveillance.
24 Eserver pSeries 655 User's Guide
Password
None Service processor MAIN MENU displays.
None Users with the password see the service processor MAIN MENU. Users
without password cannot log in.
Set Users see menus associated with the entered password.
Resulting Menu