TMA-IBM-I-5.1.1.24

Set Password Level

高级别 1人工审核ibm-i

说明

Determines the length of password that is supported as well as removing weak and deprecated NTLM passwords for Windows 95/98/ME clients from the system. User passwords with a length of 1-128 characters are supported and exclude the use of decryptable password hashes (NTLM) for older 16-bit clients. This provides additional security by having options to only support passwords that meets specified length and security requirements.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Run DSPSYSVAL SYSVAL(QPWDLVL) (or WRKSYSVAL QPWDLVL) and verify the value is "4". Remediate with: CHGSYSVAL SYSVAL(QPWDLVL) VALUE(4)

修复方式

修复方法: 操作指南或基础设施补丁

To establish the recommended configuration, set the following system value to "4": QPWDLVL CHGSYSVAL SYSVAL(QPWDLVL) VALUE(4)

属性

操作系统: 任意
标签: ibm-ipassword-policy
参考: CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.1.1.24 Set Password Level