Alcatel-Lucent 7450 - Page 174

User Management Commands
Page 174 7450 ESS System Mangement Guide
Context config>system>security>user>console
Description This command is used to allow the user access to a profile.
A user can participate in up to eight profiles.
The no form of this command deletes access user access to a profile.
Default default
Parameters user-profile-name — The user profile name.
new-password-at-login
Syntax [no] new-password-at-login
Context config>system>security>user>console
Description This command forces the user to change a password at the next console login. The new password
applies to FTP but the change can be enforced only by the console, SSH, or Telnet login.
The no form of the command does not force the user to change passwords.
Default no new-password-at-login
password
Syntax password [password]
Context config>system>security>user
Description This command configures the user password for console and FTP access.
The password is stored in an encrypted format in the configuration file when specified. Passwords
should be encased in double quotes (“ “) at the time of the password creation. The double quote char-
acter (“) is not accepted inside a password. It is interpreted as the start or stop delimiter of a string.
The password can be entered as plain text or a hashed value. SR OS can distinguish between hashed
passwords and plain text passwords and take the appropriate action to store the password correctly.
"$2y$10$pFoehOg/tCbBMPDJ/kqpu.8af0AoVGY2xsR7WFqyn5fVTnwRzGmOK"
For example:
config>system>security# user testuser1
config>system>security>user$ password "$2y$10$pFoehOg/tCbBMPDJ/
kqpu.8af0AoVGY2xsR7WFqyn5fVTnwRzGmOK"
config>system>security>user# exit
config>system>security# info
-------------------------------------
...
user "testuser1"
password "$2y$10$pFoehOg/tCbBMPDJ/kqpu.8af0AoVGY2xsR7WFqyn5fVTnwRzGmOK"
exit
...