topic sha256 encrypted username password in ICX Switches

sha256 encrypted username password

michael_payne_4 — Fri, 09 Oct 2020 15:27:40 GMT

What is the username password encryption strength number to indicate encrypted password is sha256? For example, md5 encryption strength number is 8 (username joe password 8 ).

Re: sha256 encrypted username password

syamantakomer — Fri, 09 Oct 2020 18:09:48 GMT

Hi MIchael,

This seems a query NOT related to Ruckus product but general protocol/technology related.

Here is a comparison sheet which will help you.

*Click on the image to see in original size.

Also confirm what issue you are facing so may be we can help in better way.

Regards,
Syamantak Omer

Re: sha256 encrypted username password

michael_payne_4 — Fri, 09 Oct 2020 18:28:22 GMT

Hi Syamantak, does this forum answer questions related to Ruckus software (Fastiron OS ver 08.0.70dT203)?

Re: sha256 encrypted username password

syamantakomer — Fri, 09 Oct 2020 18:37:22 GMT

Hi Michael,

Yes, that is what we do here!

You will find answers for all Ruckus products and network technology related queries.

Since your query seems specific to ICX switch, one of our ICX team members should be able to help you. And we have our forum members as well to share their experience, to help each other.

May I know if there is anything related to Unleashed as well? I can see that you tagged Ruckus Unleashed in product section for this query, along with ICX.

Regards,
Syamantak

Re: sha256 encrypted username password

michael_payne_4 — Fri, 09 Oct 2020 18:40:17 GMT

First time posting. I didn't realize selecting those options tagged specific groups. Now I know. 😉 I will wait for an ICX team member to respond. Thanks Syamantak.

Re: sha256 encrypted username password

jijo_panangat — Sun, 11 Oct 2020 12:13:47 GMT

Hello Michael,

On Fastiron software releases, the user account encrypted password uses MD5 encryption type.
You can also configure the password encryption service to encrypt the passwords with different types of encryption, such as SHA1 and SHA256, using the service password-encryption command.

ICX(config)#service password-encryption sha256
Warning: Moving to higher password-encryption type, Do you want to continue(y/n)? (enter 'y' or 'n'):y

If the password encryption service type is changed, only the users whose password encryption method matches the newly configured encryption method are allowed to log in. Apart from password encryption, all activities after creating the user account, such as logging in, modifying the local user account, and so on are bound by the configured password encryption service type.

The password encryption methods can be reverted to the default MD5 encryption type by using the no form of the service password-encryption { sha1 | sha256 } command.

Hope that helps

Thanks
Jijo

Re: sha256 encrypted username password

michael_payne_4 — Tue, 13 Oct 2020 17:26:52 GMT

Hi Jijo, thanks for the reply. I am aware of the command to change the encryption strength. What I need is the encryption strength number, which indicates the encrypted password is SHA256 vice MD5 in the username command.

MD5:
username password 8
(In the command above the 8 indicates to the software that the following encrypted string was created using MD5 encryption type.)

SHA256:
username password

Thanks,

Michael

Re: sha256 encrypted username password

jijo_panangat — Thu, 15 Oct 2020 02:37:34 GMT

Thanks Michael,

Currently, Cli doesn't offer an option of encryption strength number, it asks for clear text password and gets encrypted to MD5 by default once u configure it.

7450(config)#username ruckus password
ASCII string The UNENCRYPTED (cleartext) user password

7450(config)#username ruckus password ruckus123
7450(config)#show run | i user
username ruckus password .....

Hope that clarifies

Thanks
Jijo

Re: sha256 encrypted username password

nbctcp — Tue, 09 Aug 2022 08:47:13 GMT

ASK
1. how come after issuing
#service password-encryption sha256
my existing or new user password still the same starting with $1$
admin $1$T.pIm.tN$w9gN4CwCqi4ZArkg7kmE70 enabled 0 enabled Never
user1 $1$Pqq4SkHZ$IAGeOmAFX7J3PjJlkv91Q/ enabled 5 enabled Never

2. is that possible user with lower priviledge can't see other users hash password
tq