HP StorageWorks 2/16V Brocade Fabric OS Command Reference Manual (53-1000240-0 - Page 415

Note: Enter commands in lowercase only; mixed case is for readability. passwdCfg 2 passwdCfg Manages the password policies. Synopsis passwdcfg --help passwdcfg --set [-lowercase value][-uppercase value][-digits value][-punctuation value] [-minlength value][-history value][-minpasswordage value][-maxpasswordage value] [-warning value][-lockoutthreshold value][-lockoutduration value] passwdcfg --setdefault passwdcfg --showall passwdcfg --help passwdcfg --set Description Use this command to manage password policies. Note When secure mode is enabled, passwdCfg is not supported. Use --set to configure the following password policies: • Password strength policy • Password history policy • Password expiration policy • Account lockout policy The password strength policy enforces a set of rules that new passwords must satisfy. Configurable rules include lowercase and uppercase character, digits, punctuation occurrences and minimum length values. It is enforced only when a new password is defined. The password strength policy enforces across all user accounts. When a password fails more than one of the strength attributes, an error is reported for only one of the attributes at a time. The password history policy prevents reuse of a recently used passwords. The password history policy is enforced only when a new password is defined. The password strength policy does not verify a new password meets a minimal standard of "difference" from prior passwords, only that a newly specified password is different from the specified number of previously used passwords. The password history policy is enforced across all user accounts when the you are setting your password. The password history policy is not enforced when an administrator sets a password for another user, but the user's password history is preserved and the password set by the administrator is recorded in the user's password history. The password expiration policy forces expiration of a password after a configurable period of time. When a user's password expires, the user must change the password to complete the authentication process and open a user session. A warning that password expiration is approaching is displayed when the user logs in. The number of days prior to password expiration during which warnings commence is a configurable parameter. Password expiration does not disable or lock out the account. The password expiration policy is enforced across all user accounts except the root and factory accounts. The account lockout policy disables a user account when the user exceeds a configurable number of failed login attempts. The mechanism can be configured to keep the account locked until explicit administrative active is taken to unlock the account or locked accounts can be automatically unlocked Fabric OS Command Reference Manual Publication Number: 53-1000240-01 2-381