Enterasys Networks DFE-Gold Series clear system password

Setting User Accounts and Passwords clear system password

2-22 Startup and General Configuration

Iftherequire‐at‐creationoptionisenabled,thesetsystemlogincommandwillinteractively

promptforacleartextpassworduponcreationofanewuseraccount.Itwillbeasifaset

passwordusernamecommandwasimplicitlyexecuted.Thenewaccountwillnotbesuccessfully

createduntilavalidpasswordhasbeenspecified.Acleartextpasswordwillnotbesolicitedifan

encryptedpasswordisalreadyspecifiedbywayofthesetsystemlogincommand’spassword

option.

Iftheallow‐duplicatesoptionissettono,auserwillnotbeabletoselectasanewpasswordone

whichisalreadybeingusedbyanotheruser.

Ifasubstring‐match‐lenoptionissettozero,nosubstringmatchingwillbeperformedwhen

validatingnewpasswords.Ifthesubstring‐match‐lenoptionisconfiguredwithanonzerolength,

anysubstringofthespecifiedlengthappearinginthecurrentpasswordforthisusermaynot

appearinanewpassword.Iftheconfiguredhistorysizeisnonzero,thenallhistoricalpasswords

uptothatsizewillalsobecomparedwiththeinputofthenewpassword.Anysubstringofthe

configuredlengthappearinginanyofthehistoricalpasswordsmaynotbeusedinthenew

password.Thisoptionisnotenforcedwhenapasswordischangedbyasuperuser.

Apasswordchange‐frequencyintervalofzeromeansthereisnorestrictiononthefrequencyof

passwordchanges.

Aconfiguredminimumchange‐frequencyintervalappliesonlytouserswithoutsuper‐user

privilegesattemptingtochangetheirownpasswords.Userswithsuper‐userprivilegesmay

changetheirpasswordsatanytime.

Example

Thisexampleshowshowtosettheageofasystempasswordfor60days,theminimumlenghtof

thepasswordto6andthatthesamecharactercannotrepeatconsecutivelyinthesamepassword:

Matrix(su)->set system password age 60 length 6 allow-repeating-chars no

clear system password

Usethiscommandtosetlocalloginpasswordparameterstodefaultvalues.

Syntax

set system password [aging] [history size] [length #ofChars] [min-required-chars

{[uppercase] [lowercase] [numeric] [special]}] [require-at-creation] [allow-

duplicate] [substring-match-len #ofChars] [allow-repeating-chars] [change-first-

Parameters

aging Specifiesthatthenumberofdaystoagethepasswordberesettothe

defaultvalue.

historysize Specifiesthatthenumberofpasswordstokeepinthepasswordhistory

forauseraccountberesettothedefaultvalue.

length#ofChars Specifiesthattheminimumnumberofcharactersthatmustbepresent

inauseraccountpasswordberesettothedefaultvalue.

min‐required‐

chars

Specifiesthattheminimumnumberofcharactersofthespecifiedtype

thatmustbepresentinauseraccountpasswordbesettothedefault

value:uppercase,lowercase,numeric,special

require‐at‐creation Specifiesthattherequirementthatapasswordbeconfiguredatthetime

ofuseraccountcreationbesettothedefaultvalue.