Querying and Setting the Status of the Password Complexity Check Function (passwordcomplexity)

Function

The passwordcomplexity command is used to query and set the status of the password complexity check function.

Format

ipmcget [-t user] -d passwordcomplexity

ipmcset [-t user] -d passwordcomplexity -v <enabled | disabled>

Parameters

Usage Guidelines

Only the administrators and the custom users with security management rights can set the status of the password complexity check function.

• The password complexity check function is enabled by default.
• Disabling the password complexity check function reduces the system security. Set the parameter with caution.

• If password complexity check is disabled, the password cannot be empty or exceed 20 characters. If the password contains less than eight characters, the user cannot use the SNMPv3 interface.
• If password complexity check is enabled, the password must meet the following requirements:
  • Contain 8 to 20 characters
  • Contain at least a space or one of the following special characters:

    `~!@#$%^&*()-_=+\|[{}];:'",<.>/?

  • Contain at least two types of the following characters:
    • Uppercase letters A to Z
    • Lowercase letters a to z
    • Digits 0 to 9
  • Cannot be the same as the user name or the user name in reverse order.
  • Have at least two new characters when compared with the previous password.

In addition to the password complexity check, the iBMC also checks for weak passwords for security purposes. (You can run the Exporting the Weak Password Dictionary (weakpwddic -v export) command to export the weak passwords from the weak password dictionary.)

Example

# Query the status of the password complexity check function.

iBMC:/->ipmcget -d passwordcomplexity
Password complexity check state : enabled

# Enable the password complexity check function.

iBMC:/->ipmcset -d passwordcomplexity -v enabled
Set password complexity check state successfully.