3Com Switch 8800 Family Configuration Guide

870 CHAPTER 78: PASSWORD CONTROL CONFIGURATION
To cancel an operation, use the undo form of the corresponding command.
c
CAUTION:
■ If the history password recording function is not enabled, the password
clearing command reset password-control history-record can also clear the
history password records of a specific user or all users.
■ If the password control function is not enabled, the password aging
parameters can be configured, but will not take effect.
The following paragraphs will describe the configuration of password parameters;
Configuring the aging time of system password
After the password aging function is enabled, when a user goes through
authentication to log in, the system reads the creation time of the user’s password
and compares the password creation time with the password aging time of the
user. There can be the following three cases:
1 If the password has not expired but is within the alert time range, the system will
remind the user of the remaining days before the password will expire, and ask the
user whether he or she wants to change the password. The prompt message is as
follows:
Current user’s password will age out in 2 day(s) ,Would you like to
enter a new one ? [Y/N]
■ If the user chooses to change the password, after the password is successfully
changed, the system will record the new password and record the time when
the new password is set, and will allow the user to log in.
■ If the user chooses not to change the password or fails to change the
password, the user can still log in normally before the password expires.
2 If the user password has expired, the system will notify the user about the
expiration of the password, as follows:
your password has expired ,please enter a new password :
password: **********
confirm :**********
Namely, the user must enter a new password. After entering a new password, the
user needs to confirm it by entering it again. If the password is not appropriate, or
if the second input is different from the first input, the system will ask the user to
enter a password again; otherwise the user cannot log in successfully.
3 If the user’s password has not expired and the gap between the aging time and
the expiration time is not in the range of alert time, the user can normally log in.
After the user successfully changes his or her password, the current password is
saved into the file in the flash memory.
Display password control
information for all users
display password-control
Display can be carried out in
any view
Display super password
control information
display password-control
super
display can be carried out in
any view
Table 820 Basic configuration tasks of password control
Operation Command Description