HP StorageWorks 2/16V Brocade Fabric OS Command Reference Manual - Supporting - Page 427

passwdCfg 2 The password expiration policy forces expiration of a password after a configurable period of time. When a user's password expires, the user must change the password to complete the authentication process and open a user session. A warning that password expiration is approaching is displayed when the user logs in. The number of days prior to password expiration during which warnings commence is a configurable parameter. Password expiration does not disable or lock out the account. The password expiration policy is enforced across all user accounts except the root and factory accounts. The account lockout policy disables a user account when the user exceeds a configurable number of failed login attempts. The mechanism can be configured to keep the account locked until explicit administrative action is taken to unlock the account or locked accounts can be automatically unlocked after a specified period. An administrator can unlock a locked account at any time. Note that the account locked state is distinct from the account disabled state. The account lockout policy is enforced across all user accounts except the root, factory, and SecurityAdmin role accounts. A separate configuration option, available to the SecurityAdmin and admin role accounts, may be used to enable and disable applications of the account lockout policy to Admin role accounts. A failed login attempt counter is maintained for each user on each switch instance. The counters for all user accounts are reset to zero when the account lockout policy is enabled. The counter for an individual account is reset to zero when the account is unlocked after a lockoutduration period expires. The execution of this command is subject to Admin Domain restrictions that may be in place. Operands This command has the following operands: --help Displays the passwdCfg synopsis. -set Configures the following parameters: -lowercase value Specifies the minimum number of lowercase alphabetic characters that must occur in the password. The default value is 0. The maximum value must be less than or equal to -minlength value. -uppercase value Specifies the minimum number of uppercase alphabetic characters that must occur in the password. The default value is 0. The maximum value must be less than or equal to -minlength value. -digits value Specifies the minimum number of numeric digits that must occur in the password. The default value is 0. The maximum value must be less than or equal to -minlength value. -punctuation value Specifies the minimum number of punctuation characters that must occur in the password. All displayable, nonalphanumeric punctuation characters, except the colon (:), is allowed. The default value is 0. The maximum value must be less than or equal to -minlength value. -minlength value Specifies the minimum length of the password. The minimum can be set as 8 to 40. Passwords must be between the minimum length specified to 40 characters. The default value is 8. The total of -lowercase, -uppercase, -digits, -punctuation must be less than or equal to -minlength value. Fabric OS Command Reference Manual 395 53-1000436-01