accountSecurityLevel
CME-MIB ·
.1.3.6.1.4.1.2.3.51.2.4.1.1.20.1
Object
scalar mandatory
r/w
Enumeration
The level of security needed for local user login passwords.
The legacy level:
- no password required
- no password expiration
- no password re-use restrictions
- no frequency of password change restrictions
- account is locked for 2 minutes after 5 login failures
- simple password rules
- no account inactivity monitoring
The high level:
- password required
- factory default 'USERID' account password must be changed on next login
- force user to change password on first login
- password expires in 90 days
- password re-use checking enabled (last 5 passwords kept in history)
- minimum 24 hours interval between password changes
- account is locked for 60 minutes after 5 login failures
- complex password rules with 2 degrees of difference from previous password
- alert on account inactivity after 120 days
- accounts disabled after 180 days of inactivity
The custom level:
- set the password settings individually under customSecuritySettings
The default value is legacy.
Context
- MIB
- CME-MIB
- OID
.1.3.6.1.4.1.2.3.51.2.4.1.1.20.1- Type
- scalar
- Access
- readwrite
- Status
- mandatory
- Parent
- accountSecurityManagement
Net-SNMP examples
How SNMP and these commands workScalars have one instance, identified by the .0 suffix.
Read the scalar instance
/usr/bin/snmpget -v2c -c '<community>' -Pud -Ir -OQUv -m 'CME-MIB' -M '/opt/observium/mibs/ibm:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'udp:<hostname>:161' 'CME-MIB::accountSecurityLevel.0'
More examples
Translate to a numeric OID
/usr/bin/snmptranslate -Pud -Ir -On -m 'CME-MIB' -M '/opt/observium/mibs/ibm:/opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp' 'CME-MIB::accountSecurityLevel'
Syntax
Enumeration
Values & Constraints
Enumerated Values
0 | legacy |
1 | high |
2 | custom |