H3C SOHO IE4300, Command Reference Manual

Page: 2155 / 3296

9
By default, the system displays a message about a weak password but does not force the user to
change it. To improve the device security, you can enable the mandatory weak password change
feature, which forces the users to change the identified weak passwords. The users can log in to the
device only after their passwords meet the password requirements.
To view the password requirements, use the
display password-control
command. To
change the password composition restriction, the minimum password length, and the password
complexity checking policy, use the
password-control composition
,
password-control
length
, and
password-control complexity
commands, respectively.
Examples
# Enable the mandatory weak password change feature.
<Sysname> system-view
[Sysname] password-control change-password weak-password enable
Related commands
display password-control
password-control { aging | composition | history | length }
password-control complexity
password-control composition
password-control length
password-control enable
password-control complexity
Use
password-control complexity
to configure the password complexity checking policy.
Use undo password-control complexity to remove a password complexity checking item.
Syntax
password-control complexity { same-character | user-name } check
undo password-control complexity { same-character | user-name } check
Default
•
In non-FIPS mode:
The global password complexity checking policy is that username checking is enabled and
repeated character checking is disabled. The password complexity checking policy for a user
group equals the global setting. The password complexity checking policy for a local user
equals that of the user group to which the local user belongs.
•
In FIPS mode:
The global password complexity checking policy is that both username checking and repeated
character checking are disabled. The password complexity checking policy for a user group
equals the global setting. The password complexity checking policy for a local user equals that
of the user group to which the local user belongs.
Views
System view
User group view
Local user view
Predefined user roles
network-admin