Dell Brocade 6520 Command Reference Supporting Fabric OS v7.1.0 - Page 606

2 passwdCfg passwdCfg Manages the password policies. SYNOPSIS passwdcfg --set options value passwdcfg --setuser username options value passwdcfg --disableadminlockout passwdcfg --enableadminlockout passwdcfg --setdefault passwdcfg --showall passwdcfg --showuser username passwdcfg --deleteuser username passwdcfg --deleteuser -all passwdcfg --help DESCRIPTION Use this command to manage password policies. Use --set to configure the following password policies: • Password strength policy • Password history policy • Password expiration policy • Account lockout policy Password Strength Policy The password strength policy enforces a set of rules that new passwords must satisfy. Configurable rules include lowercase and uppercase characters, numbers, punctuation occurrences and minimum length values. It is enforced only when a new password is defined. The password strength policy is enforced cross all user accounts. When a password fails more than one of the strength attributes, an error is reported for only one of the attributes at a time. Password History Policy The password history policy prevents reuse of a recently used password. The password history policy is enforced across all user accounts when users are setting their own password. It is not enforced when an administrator sets a password for another user, but the user's password history is preserved and the password set by the administrator is recorded in the user's password history. Password Expiration Policy The password expiration policy forces expiration of a password after a specified period of time. When a user's password expires, the user must change the password to complete the authentication process. A warning that password expiration is approaching is displayed when the user logs in. The number of days prior to password expiration during which warnings commence is a configurable parameter. Password expiration does not disable or lock out the account. The password expiration policy is enforced across all user accounts except the root and factory accounts. Account Lockout Policy 578 Fabric OS Command Reference 53-1002746-01