Enterasys Matrix DFE-Gold Series

Setting User Accounts and Passwords clear system password
2-22 Startup and General Configuration
Iftherequire‐at‐creationoptionisenabled,thesetsystemlogincommandwillinteractively
promptforacleartextpassworduponcreationofanewuseraccount.Itwillbeasifaset
passwordusernamecommandwasimplicitlyexecuted.Thenewaccountwillnotbesuccessfully
createduntilavalid
passwordhasbeenspecified.Acleartextpasswordwillnotbesolicitedifan
encryptedpasswordisalreadyspecifiedbywayofthesetsystemlogincommand’spassword
option.
Iftheallow‐duplicatesoptionissettono,auserwillnotbeabletosel ectasanewpasswordone
whichisalreadybeingusedbyanotheruser.
Ifasubstring‐match‐lenoptionissettozero,nosubstringmatchingwillbeperformedwhen
validatingnewpasswords.Ifthesubstring‐match‐lenoptionisconfiguredwithanonzerolength,
anysubstringofthespecifiedlengthappearinginthecurrentpassword
forthisusermaynot
appearinanewpassword.Iftheconfiguredhistorysizeisnonzero,thenallhistoricalpasswords
uptothatsizewillalsobecomparedwiththeinputofthenewpassword.Anysubstringofthe
configuredlengthappearinginanyofthehistoricalpasswordsmay
notbeusedinthenew
password.Thisoptionisnotenforcedwhenapasswordischangedbyasuperuser.
Apasswordchange‐frequencyintervalofzeromeansthereisnorestrictiononthefrequencyof
passwordchanges.
Aconfiguredminimumchange‐frequencyintervalappliesonlytouserswithoutsuper‐user
privileges
attemptingtochangetheirownpasswords.Userswithsuper‐userprivilegesmay
changetheirpasswordsatanytime.
Example
Thisexampleshowshowtosettheageofasystempasswordfor60days,theminimumlenghtof
thepasswordto6andthatthesamecharactercannotrepeatconsecutivelyinthesamepassword:
Matrix(su)->set system password age 60 length 6 allow-repeating-chars no
clear system password
Usethiscommandtosetlocalloginpasswordparameterstodefaultvalues.
Syntax
set system password [aging] [history size] [length #ofChars] [min-required-chars
{[uppercase] [lowercase] [numeric] [special]}] [require-at-creation] [allow-
duplicate] [substring-match-len #ofChars] [allow-repeating-chars] [change-first-
login] [change-frequency minutes]
Parameters
aging Specifiesthatthenumberofdaystoagethepasswordberesettothe
defaultvalue.
historysize Specif iesthatthenumberofpasswordstokeepinthepasswordhistory
forauseraccountberesettothedefaultvalue.
length#ofChars Specifiesthattheminimumnumberofcharactersthatmustbe
present
inauseraccountpasswordberesettothedefaultvalue.
min‐required‐
chars
Specifiesthattheminimumnumberofcharactersofthespecifiedtype
thatmustbepresentinauseraccountpasswordbesettothedefault
value:uppercase,lowercase,numeric,special
require‐at‐creation Specifiesthattherequirement
thatapasswordbeconfiguredatthetime
ofuseraccountcreationbesettothedefaultvalue.