Re: initial passwords

[Bill Woodcock <woody@pch.net>]

    > The operators requirements say that new unconfigured devices MUST  NOT
    > require or have knowledge of a username or password at the time of the
    > operator's first login on the console port.
    > 
    > Do you want to be prompted to set the username and password, or do you
    > expect to download a configuration script containing the username and
    > password?

I think the latter.  I think that reminding operators if they're on a box
that doesn't yet have a password security regime configured is probably a
good idea, so long as it doesn't throw the CLI into a modal interaction.
That is, a warning as follows:

--Warning: This device does not yet have a password configured.--

is fine.  A prompt like this:

--No password has yet been configured.  Please enter a password now:

would be bad, since it would have the CLI in a different input mode than a
script might be expecting.

                                -Bill