docs/designs/expired-password.md

14 periods, effectively giving unrestricted access to the BMC.
22 Various BMC interfaces require authentication before access is granted. The
26 1. Success, when the access credentials (such as username and password) are
28 2. Failure, when either the access credentials are invalid or the account being
31 3. PasswordChangeRequired, when the access credentials are correct and the
50 The meaning of the term "access" varies by context. It could mean:
52 1. Access to the BMC's network interfaces.
53 2. Access to the BMC's authentication mechanisms together with correct
56 3. Access to the BMC's function via an authenticated interface, for example,
58 4. Access to the BMC's function via an unauthenticated interface such as host
102    access via an account which has an expired password. If the access
124    The Secure Shell access (via the `ssh` command) already correctly indicates
137    - Access via the BMC's host: for example, via the
181 - Default to having no users with access to the BMC via its network. When
182   network access is needed, a technician would create or modify the userid to
185   requires the tech to have access, and requires re-provisioning the account
187 - Disable network access by default. That approach requires another BMC access
188   vector, such as physical access or via the BMC's host, to enable network
189   access.
193   and requires the BMC provide SSH access.
212 the BMC to operate its host. The idea is that you have to establish access to
241    - All available network interfaces deny access.
261    user's session or from unauthenticated access.