IBM RS/6000 Enterprise Server M80, Service Manual

Page: 383 / 567

Passwords
Passwords can be any combination of up to eight alphanumeric characters. You can enter longer
passwords, but the entries are truncated to include only the first eight characters. The privileged-access
password can be set from service processor menus or from System Management Services (SMS) utilities
(see Chapter 9, “Using System Management Services,” on page 401). The general-access password can
be set only from service processor menus.
For security purposes, the service processor counts the number of attempts to enter correct passwords.
The results of not recognizing a correct password within this error threshold are different, depending on
whether the attempts are being made locally (at the server) or remotely (through a modem). The error
threshold is three attempts.
If the error threshold is reached by someone entering passwords at the server, the service processor
commands the server to resume the initial program load (IPL). This action is taken based on the
assumption that the server is in an adequately secure location with only authorized users having access.
Such users must still successfully enter a login password to access AIX.
If the error threshold is reached by someone entering passwords remotely, the service processor
commands the server to power down to prevent potential security attacks on the server by unauthorized
remote users. The following table lists what you can access with the privileged-access password and the
general-access password.
Privileged
Access
Password
General
Access
Password
Resulting Menu
None None Service processor MAIN MENU displays
Set None Users with the password see the service processor
MAIN MENU. Users without password cannot log
in.
Set Set Users see menus associated with the entered
password
Note: If you forget the password, you must remove the battery for at least 30 seconds to disable the
password.
v Change Privileged-Access Password
Set or change the privileged-access password. It provides the user with access to all service processor
functions. This password is usually used by the system administrator or root user.
v Change General-Access Password
Set or change the general-access password. It provides limited access to service processor menus, and
is usually available to all users who are allowed to power on the server, especially remotely.
Note: The general-access password can only be set or changed after the privileged-access password
is set.
Chapter 8. Using the Service Processor
365