Password administration (CIT and system)

Overview

System administration includes performing the following:

• Changing passwords

• Changing notifications

• Performing security administration

• Viewing NE administration

• Setting TIDs

• Setting NE defaults

• Performing a LAN reset

• Provisioning data communications

• Viewing OSI routing map

WaveStar^® CIT user ID/password administration

The Administration → Security → User Provisioning command on the WaveStar^® CIT View menu allows a privileged user to create, change, or delete another user ID or password.

Important!

Any changes made to a user's provisioning takes place the next time the user logs in. If the user is currently logged in, no changes take place until that user logs off and logs back in.

Valid WaveStar^® CIT user IDs

A valid WaveStar^® CIT user ID must be a minimum of one character to a maximum of ten characters (no character restrictions).

Valid WaveStar^® CIT passwords

A valid WaveStar^® CIT password must comply with the following:

• Length must be a minimum of six characters to a maximum of ten characters

• Must begin with a letter

• Must contain at least three non-alphabetic characters (symbol or number)

• At least one of the non-alphabetic characters must be a symbol

• When changing a password, the new password must be different from the previous password by at least three characters and cannot be one of the last 5 passwords used.

Important!

User passwords are case-sensitive.

Characters not allowed in a WaveStar^® CIT password

The following table lists the characters that are not allowed in a WaveStar^® CIT password.

Table 5-23: Characters not allowed in a WaveStar^® CIT password

Character	Description		Character	Description
	Space		“	Quotation mark
@	Commercial at		&	Ampersand
,	Comma		;	Semicolon
:	Colon		_	horizontal bar (underscore)
=	Equals sign		?	Question mark

Characters allowed in a WaveStar^® CIT password

The following table lists the characters that are allowed in a WaveStar^® CIT password.

Table 5-24: Characters allowed in a WaveStar^® CIT password

Character	Description		Character	Description
A... Z	Uppercase letters		*	Asterisk
a... z	Lowercase letters		[	Left square bracket
0... 9	Digits		]	Right square bracket
'	Apostrophe		^	Caret
-	Hyphen		`	Grave accent
(	Left parenthesis		{	Left curly brace
)	Right parenthesis		}	Right curly brace
.	Period (full stop)		|	Vertical bar
/	Slash (Solidus)		<	Less than
+	Plus sign		>	Greater than
!	Exclamation mark		~	Tilde
%	Percent sign		#	Number sign

Changing your own WaveStar^® CIT password

The WaveStar^® CIT Administration → Change Password command allows any user to change his or her own WaveStar^® CIT password. Only privileged users can change another user's ID or password.

The Change Password screen is also automatically invoked immediately after the login screen if a user's password has expired. The user is prevented from performing any other function until the password is successfully changed. This screen is also invoked the first time a login is attempted for a new user ID.

User ID/password administration

The Administration → Security → User Provisioning command on the network element System View menu allows a privileged user to create, change, or delete another network element user ID or password.

Important!

Any changes made to a user's provisioning takes place the next time the user logs in. If the user is currently logged in, no changes take place until that user logs off and logs back in.

Valid user IDs

A valid user ID must be a minimum of five allowed characters to a maximum of ten allowed characters.

Valid passwords

A valid password must comply with the following conditions:

• The maximum and minimum password are provisioned by the Security Administrator.

  • The minimum password length is provisionable to be between 6 (default) and 18 characters.

  • The provisioned maximum password length is provisionable to be equal to or greater than the minimum password length; the maximum is 20 characters.

• If the provisioned value of the maximum password length is less that or equal to 10 characters, the following password composition rules apply:

  • Passwords must contain at least one alphabetic character and at least three non-alphabetic characters (numeric and the special characters)

  • At least one of the non-alphabetic characters must be a numeric character and at least one must be one of the special characters.

• If the provisioned value of the maximum password length is greater than 10 characters, the following password composition rules apply:

  • Passwords must contain a mix of upper-case alphabetic characters, lower-case alphabetic characters, numeric characters, and special characters, including at least two of each type.

  • Passwords cannot contain consecutive identical characters.

  • A password cannot contain the user login.

• When passwords are changed, the old and new passwords must be different in at least three-character positions. The original password, or a significant substring of it, must not be part of the new password.

  If the current and new passwords are the same length, then the characters in at least three-character positions must be different.

  If the current and new passwords are different lengths, then for each possible contiguous sub-string of the length of the shorter password within the longer password, the characters in at least three-character positions must be different between the shorter password and the character sub-string within the longer password.

• The number of most recently used passwords that are not allowed to be reused is provisionable. The range is 5 (default) to 15. If the default is used, the network element prohibits the reuse of the five most recently used passwords.

Important!

User passwords are case-sensitive.

Characters NOT allowed in a password and user ID

The following table lists the characters that are not allowed in a password and user ID.

Table 5-25: Characters NOT allowed in an Alcatel-Lucent 1665 DMX password and user ID

Character	Description		Character	Description
	Space		“	Quotation mark
@	Commercial at		;	Semicolon
,	Comma		*	Asterisk
:	Colon		!	Exclamation Mark
=	Equals sign		?	Question mark
\	Back slash

Characters allowed in a Alcatel-Lucent 1665 DMX password and user ID

The following table lists the characters that are allowed in a password and user ID.

Table 5-26: Characters allowed in an Alcatel-Lucent 1665 DMX password and user ID

Character	Description		Character	Description
A... Z	Uppercase letters		^	Caret
a... z	Lowercase letters		`	Grave accent
0... 9	Digits		{	Left curly brace
'	Apostrophe		}	Right curly brace
-	Hyphen		|	Vertical bar
(	Left parenthesis		<	Less than
)	Right parenthesis		>	Greater than
.	Period (full stop)		~	Tilde
/	Slash (Solidus)		%	Percent sign
+	Plus sign		#	Number sign
[	Left square bracket		&	Ampersand
]	Right square bracket		_	Horizontal bar (underscore)

Changing your own password

From the network element System View, the Administration → Change Password command allows any user to change his or her own password. Only privileged users can change another user's ID or password.

When a user changes their own password, the new password must be different in at least three character positions from the current password.

The original password, or a significant substring of it, must not be part of the new password.

• If the current and new passwords are the same length, then the characters in at least 3 character positions must be different.

• If the current and new passwords are different lengths, then for every possible contiguous substring of the length of the shorter password within the longer password, the characters in at least three character positions must be different between the shorter password and the character substring within the longer password. Also, the password cannot be one of the last 5 used.