Alcatel-Lucent 7705 SAR, System Management Manual

Page: 117 / 356

Security
7705 SAR OS System Management Guide 117
password
Syntax password [ password ] [ hash | hash2 ]
Context config>system>security>user
Description
This command configures the user password for console and FTP access.
The use of the hash keyword sets the initial password when the user is created or modifies the
password of an existing user and specifies that the given password was hashed using hashing algorithm
version 1.
The use of the hash2 keyword specifies that the given password is already hashed using hashing
algorithm version 2. A semantic check is performed on the given password field to verify that it is a
valid hash2 key to store in the database.
The password is stored in an encrypted format in the configuration file when specified. Passwords must
be encased in double quotes (" ") at the time of the password creation if they contain any special
characters. The double quote character (") is not accepted inside a password. It is interpreted as the start
or stop delimiter of a string.
For example:
config>system>security# user testuser1
config>system>security>user$ password "zx/Uhcn6ReMOZ3BVrWcvk." hash2
config>system>security>user# exit
config>system>security# info
-------------------------------------
...
user "testuser1"
password "zx/Uhcn6ReMOZ3BVrWcvk." hash2
exit
...
-------------------------------------
config>system>security#
Parameters password — the password for the user that must be entered by this user during the login procedure.
The minimum length of the password is determined by the minimum-length command. The
maximum length can be up to 20 characters if unhashed and 32 characters if hashed or 54
characters if
hash2 . The complexity requirements for the password are determined by the
complexity command.
Passwords that contain special characters (#, $, spaces, etc.) must be enclosed within double
quotes.
For example:
config>system>security>user# password “south#bay?”
The question mark character (?) cannot be directly inserted as input during a Telnet
connection because the character is bound to the
help command during a normal Telnet/
console connection.
To insert
#
or
?
characters, they must be entered inside a notepad or clipboard program and
then cut and pasted into the Telnet session in the password field that is encased in the double
quotes as delimiters for the password.