Contents

1   Description

This instruction describes how to remove the password from a local Operation and Maintenance (O&M) user account.

It is recommended that the local user password is removed when the Secure Shell (SSH) public key is set and if the password authentication is not expected to be used.

2   Procedure

2.1   Remove Password from User Account

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • The user has sufficient access rights to perform the task, for example, the user has the LocalAuthenticationAdministrator role.
  • The username for the local user account is known. In this instruction, the username is joedoe.
  • An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

Steps

1. Navigate to the UserAccountM MO, for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,UserAccountM=1

2. Select the user account, for example:

   (UserAccountM=1)>UserAccount=joedoe

3. Remove the password:

   (UserAccount=joedoe)>removePassword

4. Verify that the password has been removed by checking that the password state has been cleared, for example:

   (UserAccount=joedoe)>show passwordState

   The following is an example output:

   PasswordState=[]

5. Optional step: It is recommended to delete the password policy reference when the password is removed, for example:
   1. Enter Config mode:

      (config-UserAccount=joedoe)>configure

   2. Delete the attribute password policy, for example:

      (config-UserAccount=joedoe)>no passwordPolicy

   3. Commit the settings

      (config-UserAccount=joedoe)>commit

   4. Verify the deletion, for example:

      (config-UserAccount=joedoe)>show passwordPolicy

      The following is an example output:

      passwordPolicy=[]