IBM 6H0, Service Manual

Page: 395 / 561

Passwords
Passwords can be any combination of up to eight alphanumeric characters. You can
enter longer passwords, but the entries are truncated to include only the first eight
characters. The privileged-access password can be set from service processor menus
or from System Management Services (SMS) utilities (see Chapter 8, “Using System
Management Services,” on page 413). The general-access password can be set only
from service processor menus.
For security purposes, the service processor counts the number of attempts to enter
correct passwords. The results of not recognizing a correct password within this error
threshold are different, depending on whether the attempts are being made locally (at
the server) or remotely (through a modem). The error threshold is three attempts.
If the error threshold is reached by someone entering passwords at the server, the
service processor commands the server to resume the initial program load (IPL). This
action is taken based on the assumption that the server is in an adequately secure
location with only authorized users having access. Such users must still successfully
enter a login password to access AIX.
If the error threshold is reached by someone entering passwords remotely, the service
processor commands the server to power down to prevent potential security attacks on
the server by unauthorized remote users. The following table lists what you can access
with the privileged-access password and the general-access password.
Privileged
Access
Password
General
Access
Password
Resulting Menu
None None Service processor MAIN MENU displays
Set None Users with the password see the service processor MAIN
MENU. Users without password cannot log in.
Set Set Users see menus associated with the entered password
Note: If you forget the password, you must remove the battery for at least 30 seconds
to disable the password.
v
Change Privileged-Access Password
Set or change the privileged-access password. It provides the user with access to all
service processor functions. This password is usually used by the system
administrator or root user.
v Change General-Access Password
Set or change the general-access password. It provides limited access to service
processor menus, and is usually available to all users who are allowed to power on
the server, especially remotely.
Note: The general-access password can only be set or changed after the
privileged-access password is set.
Chapter 7. Using the Service Processor
375