Securing Password Entry

AltaNivel 1Revisión manualaruba-cx

Descripción

This section describes a method of obfuscating or masking password or shared secret entry.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Confirm administrators enter passwords and shared secrets interactively (masked), e.g. 'user <name> password' or 'radius-server host <ip> key' followed by the prompt, rather than typing plaintext values on the command line where they are kept in history and logs.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

The password masking function is accesses by example - creating a new user: user switchAdmin group administrators password Enter password: ******** Confirm password: ******** example - changing a user password: user switchAdmin password Enter password: ******** Confirm password: ******** example - configuring a radius host shared secret: radius-server host 10.10.10.10 key Enter the RADIUS server key: ******** Re-Enter the RADIUS server key: ********

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aruba-cxauthentication
Referencia: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.1.2 Securing Password Entry