Neoview User Management and Security Administration Guide (R2.5)

optionally followed by the keyword SELF. If you use this form, NCI prompts you for the
old and new passwords, then asks you to confirm the new password.
• If you do intend to enter an old password, a new password, or both on the command line,
you must use the form of the command that includes the keywords OLD-PASSWORD and
NEW-PASSWORD. If you use this form, SELF is required. Furthermore, OLD-PASSWORD is
required if you are providing your old password, and NEW-PASSWORD is required if you
are providing your new password.
Parameters
• oldpassword is the current password for your individual account; do not include the
password for the underlying platform role, e.g., ROLE.SECMGR. If you include the keyword
but omit the value, NCI prompts you for the password and does not echo your input to the
screen.
• newpassword is the new password to be assigned and must comply with the password
quality criteria specified in the current system security policy (described in “Viewing and
Updating the Password Quality and Control Policies” (page 44)). If you include the keyword
but omit the value, NCI prompts you for the password, requires you to confirm the password
by entering it for a second time, and does not echo your input to the screen.
NOTE: NCI allows you to enter a password of up to 64 bytes in length. However, a
password of this length might or might not enable you to log on later. The maximum length
of a valid password is dependent on the security policies configured on your Neoview
platform:
— If the platform is configured to use 1024-bit keys, the limit is 53 characters.
— If the platform is configured to use 2048-bit keys, the limit is 64 characters.
— If the security policy requires you to enter both your own password and the role
password in order to log on, the maximum total length of the two passwords together
is 52 bytes in the case of 1024-bit encryption and 128 bytes in the case of 2048-bit
encryption.
Examples
Here are four examples of the ALTER PASSWORD command. These examples omit .sec because
NCI was already in security mode, as described in “Security Mode” (page 29):
You are prompted for ...Command
OLD PASSWORD:
NEW PASSWORD:
Confirm new password:
alter password
OLD PASSWORD:
NEW PASSWORD:
Confirm new password:
alter password self
OLD PASSWORD:
NEW PASSWORD:
Confirm new password:
alter password self, old-password,
new-password
This command requires no prompting.
CAUTION: If you use this form of the command and you
make a syntax error, the password you enter could be
logged in clear text on your client system. To prevent a
password from being exposed in this way, specify only the
keyword OLD-PASSWORD or NEW-PASSWORD and allow
yourself to be prompted for the value.
alter password self, old-password mars,
new-password venus
User Management Commands 109