Cisco OL-5742-01 - Manual (Page 5)

18-5
Cisco Signaling Gateway Manager User Guide
OL-5742-01
Chapter 18 Configuring SGM Security
Configuring SGM User-Based Access
Note If sgm authtype is set to solaris, users cannot change their passwords
using the SGM client. Instead, they must manage their passwords on the
external authentication servers, using Solaris commands, such as passwd.
All new passwords take effect the next time SGM automatically
synchronizes local SGM passwords with Solaris, or you can manually
synchronize passwords at any time using the sgm syncusers command.
See the
“sgm syncusers” section on page C-118 for more information.
At this point, you have implemented your basic SGM User-Based Access. Users
must now log in before using the SGM client, the GTT client, and SGM
Web-based functions. Use the remaining procedures in this section to customize
your SGM security system.
Note After you implement SGM User-Based Access, if a user logs in on one SGM or
GTT client, then logs in on a second SGM or GTT client, SGM closes the first
client and records the event in the system security log.
Creating Secure Passwords
When setting passwords in SGM, keep in mind the following rules and
considerations:
• The password must be at least 6 characters, up to an unlimited number of
characters. However, passwords longer than 15 characters are not
recommended.
• The password cannot be identical to the user name.
• The new password cannot be the same as the old password.
• SGM does not allow users to switch back-and-forth between two passwords.