class AdministratorAccount

ManagedElement
+-SystemFunctions
+-SecM
+-UserManagement
+-LocalAuthenticationMethod
+-AdministratorAccount
+-SshPublicKey [0..1]

The administrator account.

Used for initial and recovery scenarios when authentication to regular O&M accounts is inaccessible.


This MO is created by the system.

References to:
PasswordQuality;
Actions
void
clearFailedAuthenticationAlarm ( );
Clears the alarm of failed authentications.

The action shall be invoked when the external password attack leading to the Authentication Failure Limit Reached alarm is isolated from the ME or to test if the attack persists.

The threshold when the alarm is raised can be configured by attributes passwordMaxFailure and passwordFailureCountInterval.

Attributes
string
key
mandatory
noNotification
restricted
administratorAccountId
The value component of the RDN.

The user ID to be provided at authentication.
DateTime[0..1]
readOnly
lastLoginTime
The date of the last successful login.
DateTime[0..1]
readOnly
passwordChangedTime
The time the password was last changed.
SecLA_AdministratorAccount_passwordFailureCountInterval[0..1]
passwordFailureCountInterval = 86400
The time interval within which consecutive failed login attempts count in seconds.

Specifies the time interval it takes to obsolete records in passwordFailureTimes used for attribute passwordMaxFailure. No value means the failure counter is reset only on successful authentication.
DateTime[0..] nonUnique
noNotification
readOnly
passwordFailureTimes
Dates of failed login attempts.

The list of dates when a user tried to authenticate to this account and failed. The attribute can be reset by a successful authentication. The dates outside the time-window set by passwordFailureCountInterval are removed.
int32
noNotification
readOnly
passwordHistoryLength
Specifies the number of passwords remembered by the ME to avoid reuse of old passwords.
SecLA_AdministratorAccount_passwordMaxFailure[0..1]
passwordMaxFailure = 3
Maximum failed login attempts to send an authentication failure alarm.

Specifies the number of consecutive failed login attempts that can be performed before the account is alarmed, as counted in passwordFailureTimes. No value disables alarm sending.
int32
noNotification
readOnly
passwordMinLength
Minimum length of passwords.

Specifies the minimum character lengths of passwords that the ME can accept.
PasswordQuality
mandatory
passwordQuality
The password quality parameters used.

Refers to the DN of a PasswordQuality MO.

  class AdministratorAccount