H3C SOHO IE4300, Command Reference Manual

Page: 50 / 3296

29
Parameters
role role-name
: Specifies a user role, a case-sensitive string of 1 to 63 characters. The user role
must exist in the system and cannot be security-audit. If you do not specify a user role, the command
sets a password for the default target user role which is set by using the
super default role
command.
hash
: Specifies a password in hashed form.
simple
: Specifies a password in plaintext form. For security purposes, the password specified in
plaintext form will be stored in hashed form.
string
: Specifies the password. In non-FIPS mode, the plaintext form of the password is a
case-sensitive string of 1 to 63 characters. The hashed form of the password is a case-sensitive
string of 1 to 110 characters. In FIPS mode, the password must be a case-sensitive plaintext string of
15 to 63 characters. The string must contain four character types including digits, uppercase letters,
lowercase letters, and special characters.
Usage guidelines
If you do not specify any parameters, you specify a plaintext password in the interactive mode.
The FIPS mode supports only the interactive mode for setting a password.
Set a password if you configure local password authentication for temporary user role authorization.
It is a good practice to specify different passwords for different user roles.
When the global password control feature is enabled, all history super passwords are stored in
hashed form.
•
If you set a new super password in plaintext form, make sure the new super password is
different from the current one and those stored in the history super password records.
•
If you set a new super password in hashed form, the system does not compare the new super
password with the current one or those stored in the history super password records.
Examples
# Set the password to 123456TESTplat&! in plaintext form for user role network-operator.
<Sysname> system-view
[Sysname] super password role network-operator simple 123456TESTplat&!
# Set the password to 123456TESTplat&! in the interactive mode for user role network-operator.
<Sysname> system-view
[Sysname] super password role network-operator
Password:
Confirm :
Updating user information. Please wait... ...
Related commands
super authentication-mode
super default role
super use-login-username
Use
super use-login-username
to enable the device to automatically obtain the login
username when a login user requests temporary user role authorization from a remote
authentication server.
Use undo super use-login-username to restore the default.