creating users and password

IOS2JUNOS

need some clarification----in JNCIP lab 1 it says to create users/password lab, root and noc. when i try to create these with the same password it says the password should be minimum 6 charc..
can this restriction be changed to just 3 letter and no alphanumeric?
or if these users are going to be authenticated by radius, do we not create a local password?
what's the gotcha here?

thanks all

Aldur

Nope, the restriction of password length and characters cannot be changed. That's why I favor lab123 as a password for my lab gear

Yup, if the users are going to authenticate via radius you don't need to define a local password for the user.

zoidberg

aaaaactually... some of these restrictions can be modified

the min char limit is still stuck at 6 though.
setting min changes to 0 though will get rid of alphanumeric.

[edit system login password]
juniper# set ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
  change-type          Password change type
  format               Encryption method to use for password
  maximum-length       Maximum password length for all users (20..12[IMG]https://us.v-cdn.net/6030959/uploads/images/smilies/icon_cool.gif[/IMG]
  minimum-changes      Minimum number of changes in password
  minimum-length       Minimum password length for all users (6..20)
[edit system login password]
juniper# set    

Here's a link: Juniper Networks :: Technical Documentation :: Special Requirements for JUNOS Software Plain-Text Passwords

This link shows this in 10.2, but I'm sure it showed up ages ago as I remember looking into this when I ran into the same JNCIP scenario.

zoidberg

here are the defaults.

[edit]
juniper# show system login password | display inheritance defaults brief    
## '6' was inherited from group 'junos-defaults'
minimum-length 6;
## 'set-transitions' was inherited from group 'junos-defaults'
change-type set-transitions;
## '1' was inherited from group 'junos-defaults'
minimum-changes 1;
## 'md5' was inherited from group 'junos-defaults'
format md5;

[edit]
juniper# 

Aldur

Do'h! so I guess there is a way to do that. Good find zoidberg!

RabeenZhu

good work!

zoidberg wrote: »

here are the defaults.

[edit]
juniper# show system login password | display inheritance defaults brief    
## '6' was inherited from group 'junos-defaults'
minimum-length 6;
## 'set-transitions' was inherited from group 'junos-defaults'
change-type set-transitions;
## '1' was inherited from group 'junos-defaults'
minimum-changes 1;
## 'md5' was inherited from group 'junos-defaults'
format md5;
 
[edit]
juniper#