password-control length

Syntax

password-control length length

undo password-control length

View

System view, user group view, local user view

Default level

2: System level

Parameters

length: Specifies the minimum password length in characters. The value range for this argument is 4 to 32 in non-FIPS mode and 8 to 32 in FIPS mode.

Description

Use password-control length to set the minimum password length.

Use undo password-control length to restore the default.

By default, the global minimum password length is 10 characters, the minimum password length of a user group equals the global setting, and the minimum password length of a local user equals that of the user group to which the local user belongs.

A minimum password length setting with a smaller application range has a higher priority. That is, the system prefers the setting for a local user. If there is no setting for the local user, the system will use the setting for the user group. If there is no setting for the user group, the system will use the global setting.

If you do not set the minimum password length for super passwords, the global minimum password length applies.

When global password control is enabled but the minimum password length restriction function and FIPS mode are disabled, the minimum password length is four characters, and the password must have at least four different characters.

When global password control and FIPS mode are enabled but the minimum password length restriction function is disabled, the minimum password length is eight characters, and the password must have at least four different characters.

Related commands: display password-control, local-user, and user-group.

Examples

# Set the global minimum password length to 9 characters.

<Sysname> system-view
[Sysname] password-control length 9 

# Set the minimum password length to 9 characters for user group test.

[Sysname] user-group test
[Sysname-ugroup-test] password-control length 9
[Sysname-ugroup-test] quit

# Set the minimum password length to 9 characters for local user abc.

[Sysname] local-user abc
[Sysname-luser-abc] password-control length 9