Securing Password Entry

TinggiLevel 1Tinjauan manualaruba-cx

Deskripsi

This section describes a method of obfuscating or masking password or shared secret entry.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Confirm administrators enter passwords and shared secrets interactively (masked), e.g. 'user <name> password' or 'radius-server host <ip> key' followed by the prompt, rather than typing plaintext values on the command line where they are kept in history and logs.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

The password masking function is accesses by example - creating a new user: user switchAdmin group administrators password Enter password: ******** Confirm password: ******** example - changing a user password: user switchAdmin password Enter password: ******** Confirm password: ******** example - configuring a radius host shared secret: radius-server host 10.10.10.10 key Enter the RADIUS server key: ******** Re-Enter the RADIUS server key: ********

Properti

Sistem operasi: Apa saja
Tag: aruba-cxauthentication
Referensi: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.1.2 Securing Password Entry