This section describes how to manage user accounts and credentials.
The following accounts are initialized during the installation of SmartFabric OS10:
The following are the default credentials for the preloaded accounts.
User account | Default password | Description |
---|---|---|
admin | admin | Default user with the sysadmin user role. |
linuxadmin | linuxadmin | Default user to access the Linux shell. |
Change the default CLI password
When you log in to the switch for the first time, the system prompts you to enter a username to enter the command-line interface. To log in to OS10 for the first time, enter admin as the username and the password. Change the default admin password after your first login to something secure or create at least one OS10 user with the sysadmin role and delete the default admin username. The system saves the new password for future logins. After you change the password using the CLI, use the write memory command to save the configuration.
OS10# configure terminal % Error: ZTD is in progress(configuration is locked). OS10# ztd cancel OS10# configure terminal OS10(config)# username admin password new-password role sysadmin OS10(config)# exit OS10# write memory
To delete the default admin username, log in to a different account with the sysadmin role, and do the following:
OS10(config)# no username admin
Use the following command to view the details of all users configured on the system:
OS10# show running-configuration users
Change the default linuxadmin password
You use the Linux shell for troubleshooting and diagnostic purposes. After the first OS10 login, enter linuxadmin for both the default Linux shell username and password and change the default linuxadmin password. The system saves the new password for future logins. After you change the password using the CLI, use the write memory command to save the configuration.
OS10# configure terminal OS10(config)# system-user linuxadmin password {clear-text-password | hashed-password} OS10(config)# exit OS10# write memory
Disable the linuxadmin account
If you do not want your users to access the Linux shell, disable the linuxadmin account.
OS10(config)# system-user linuxadmin disable OS10(config)# exit OS10# write memory
Disable access to Linux commands
Even if you disable the linuxadmin user, users can access Linux commands using the system command. To disable access to Linux commands completely, use the system-cli command.
OS10(config)# system-cli disable OS10(config)# exit OS10# write memory
When the user views the running configuration, the password is displayed in an encrypted format. You can obscure passwords in show command outputs so that text characters do not display.
OS10(config)# service obscure-password OS10(config)# exit OS10# write memory OS10# show running-configuration users username admin password **** role sysadmin priv-lvl 15 username desk1 password **** role sysadmin priv-lvl 15
Strict password rules ensure better security of the device.
Enable strong passwords
Strong passwords make it difficult to guess your passwords. By default, a strong password check is enabled on the system which checks if the password contains at least alphanumeric and special characters. If a strong password check is disabled, enable it.
OS10(config)# no service simple-password OS10(config)# exit OS10# write memory
Check if strong password check is enabled
By default, a strong password check is enabled on the system and the no service simple-password command is implicit in the running configuration. To verify if a strong password check is enabled, use the following command:
OS10(config)# do show running-configuration | grep simple service simple-password
Enforce custom password complexity
By default, the password you configure must have at least nine characters with alphanumeric and special characters. To increase the password strength further, you can enforce a custom password complexity.
OS10(config)# password-attributes {[min-length number] [character-restriction {[upper number] [lower number][numeric number] [special-char number]}} OS10(config)# exit OS10# write memory
When choosing your password, Dell Technologies recommends that you use multiple and easy-to-remember common words in your password instead of using complex passwords which you may not remember. Combine multiple words that you can remember and modify the passphrase using special characters and numbers to get a final password. For example, instead of correcthorsebatterystaple, you can use C0rr3c+h0r5e8atTerystapl3.