HP StorageWorks 2/16V Brocade Fabric OS Command Reference Manual - Supporting - Page 423

passwd 2 passwd Changes the password for the specified user. Synopsis passwd ["user"] Description Use this command to change a user account password. The passwd command is allowed on all switches in the fabric unless the fabric is configured for security when Secure Fabric OS is enabled. If you issue this command without any argument, the password is changed for the current login account only. When the passwd command is issued with an account name argument, the password change is accepted for that account. If the account name is different from the current login account, the current login account must be authorized as admin, factory, root, or securityAdmin. The command always prompts for the old password. If RADIUS authentication is enabled, the password change is blocked. Administrators with the privilege to change passwords for other accounts may do so regardless of whether RADIUS authentication is enabled; all such password changes operate on the local password database. When Secure Fabric OS is enabled, the passwd command is allowed only on the primary FCS switch and the password database is distributed to the switches in the fabric. After a successful password change, the CLI login sessions of the changed account are terminated. The passwd command cannot be run on the Standby CP.When an admin account or a securityAdmin account changes password for other accounts, it does not prompt for the current password, unless the target account is factory or root account. Any chosen password must satisfy the following password strength rules: • Password contains the minimum required number of lowercase characters • Password contains the minimum required number of uppercase characters • Password contains the minimum required number of numeric characters • Password contains the minimum required number of punctuation characters • Password must be between and 40 characters long • Password may not contain the colon ":" character • Password must satisfy repeated and sequential character constraints The password history policy is enforced across all user accounts when the user is setting his own password. The password history policy is not enforced when an administrator sets a password for another user, but the user's password history is preserved and the password set by the administrator is recorded in the user's password history. If the fabric is not in secure mode, the behavior of the command is as follows: • If you are changing your own password, you are prompted to enter the old password and, if your entry is valid, you are prompted to enter the new password. • If a you are changing another user's password with greater privileges than your current login level, you are prompted to enter that user level's old password and, if your entry is valid, then enter the new password. • If you are changing another user's password, the target account's AD member list must be a subset of your account's AD member list. Fabric OS Command Reference Manual 391 53-1000436-01