IBM RS/6000 44P Series 270, Service Manual

Page: 173 / 346

Passwords
Passwords can be any combination of up to eight alphanumeric characters. You can
enter longer passwords, but the entries are truncated to include only the first eight
characters. Passwords can be set from the service processor menu or from the System
Management Services menus.
For security purposes, the service processor counts the number of attempts to enter
correct passwords. The results of not recognizing a correct password within this error
threshold are different, depending on whether the attempts are being made locally (at
the server) or remotely (through a modem). The error threshold is three attempts.
If the error threshold is reached by someone entering passwords at the server, the
service processor exits the menus. This action is taken based on the assumption that
the server is in an adequately secure location with only authorized users having access.
Such users must still successfully enter a login password to access AIX.
If the error threshold is reached by someone entering passwords remotely, the service
processor disconnects the modem to prevent potential security attacks on the server by
unauthorized remote users.
The following table illustrates what you can access with the privileged-access password
and the general-access password.
Privileged-Access Password General-Access Password Resulting Menu
None None MAIN MENU displays
None Set MAIN MENU displays
Set None Users with password see the
MAIN MENU. Other users see
the GENERAL USER MENU.
Set Set Users see menus associated
with the entered password
v
Change Privileged-access Password
Set or change the privileged-access password. It provides the user with the capability
to access all service processor functions. This password is usually used by the
system administrator or root user.
v Change General-Access Password
Set or change the general-access password. It provides limited access to service
processor menus and is usually available to all users who are allowed to power on
the server.
v Enable/Disable Console Mirroring
When console mirroring is enabled, the service processor sends information to both
serial ports. This capability, which can be enabled by local or remote users, provides
local users with the capability to monitor remote sessions. Console mirroring can be
enabled for the current session only. For more information, see “Console Mirroring”
on page 181.
v Start Talk Mode
Chapter 7. Using the Service Processor
155