PWD (CFN)

From PBX Wiki

The Configuration Record houses system-level password information.

Password Complexity

With Release 4.5 software, Nortel introduced the "Password Complexity" check. By answering "YES" to the "PSWD_COMP" prompt, all passwords will be checked for complexity, not allowing "weak" passwords to be entered.

Password Levels

PBX passwords have different levels of access.

Level One

Level One (or ADMIN1) access is the most commonly used level of access. With this level a user may administer and maintain the PBX and complete the majority of PBX-related functions, minus password-related activities.

For further information on Level One access, please see the PWD (Level One) article.

Level Two

Level Two (or ADMIN2) access is used for password management, as well as other high security risk tasks. Best practices dictate that the user should log in with Level One credentials and "escalate" to Level Two only when needed.

Level Two also has the ability to Force Log Off another user.

For further information on Level Two access, please see the PWD (Level Two) article.

Limited Access Passwords (LAPW)

Limited access passwords (LAPW) may be created to grant restricted access to users. For instance, a user only requiring the ability to print TN information may only be granted access to Overlay 20.

Further LAPW Restrictions

LAPWs may also be configured with the following restrictions:

• CUST
  • The user may be granted access to a specific Customer Number, no Customers or "ALL" Customers.
• OVLA
  • Listing of Overlays the user is allowed to load.
  • Enter a Carriage Return for access to all overlays
  • Precede an overlay number with an "X" to remove access.
• HOST
  • Enable HOST Mode Log In for Password
• MAT
  • Enable MAT Log In for Password
• OPT (Password Options)
  • default options are in BOLD text
  • CFPD/CFPA - Configuration Prompts Allowed
  • DTD/DTA - Deny/Allow DN-TN correspondence
  • FEAD/FEAA - Allow change set features
  • FORCD/FORCA - Allow the user to Force Logoff another user
  • LLCD/LLCA - Line Load Control Denied/Allowed
  • LOSD/LOSA - Loss Plan Customization Denied/Allowed
  • MOND/MONA - Deny/Allow access to the Monitor command
  • NAMD/NAMA - Deny/Allow ability to change CPND names
  • PROD/PROA - Allow/Deny access for Printing Only
  • PSCA/PSCD - Allow/Deny ability to print speed call lists
  • RDBD/RDBA - Allow/Deny access to resident debug
  • TADD/TADA - Allow/Deny ability to set the time and date
  • TOLD/TOLA - Allow/Deny ability to change toll restrictions
  • TRKD/TRKA - Allow/Deny ability to change trunks

Printing Password Information

To print Password information configured in the CFN:

1. Load Overlay 22
2. Execute the PRT command
3. Enter PWD at the TYPE prompt
4. Enter the Level Two Password

Example PBX I/O:

>LD 22
PT2000 

REQ  PRT
TYPE PWD
PWD2 

PWD  
  FLTH 3 
  LOCK 30 
  AUDT YES 
  SIZE 1500 
  INIT NO
  LNAME_OPTION YES
  PWD1 0000
  LOGIN_NAME ADMIN1
  PWD2 1234
  LOGIN_NAME ADMIN2

  PW00 MMAIL
  PWTP OVLY
  LOGIN_NAME USER0
  OVLA  002  048 
  CUST ALL 
  HOST NO
  MAT  NO
  OPT  PSCD CFPD LLCD PROD LOSD FORCD MOND 

  PW01 1111
  PWTP OVLY
  LOGIN_NAME MYLAPW1
  OVLA  001  002  003  004  005  006  007  008  009  010 
        011  012  013  014  015  016  017  018  019  020 
        021  022  023  024  025  026  027  028  029  030 
        031  032  033  034  035  036  037  038  039  040 
        041  042  043  044  045  046  047  048  049  050 
        051  052  053  054  055  056  057  058  059  060 
        061  062  063  064  065  066  067  068  069  070 
        071  072  073  074  075  076  077  078  079  080 
        081  082  083  084  085  086  087  088  089  090 
        091  092  093  094  095  096  097  098  099  117 
        135  137  143 
  CUST ALL 
  HOST NO
  MAT  NO
  OPT  PSCA CFPA LLCD PROD LOSD FORCD MOND 

REQ  

References

• Software Input/Output Administration - Document Number: 553-3001-311