Dell Brocade G620 Brocade 8.0.1 Fabric OS Command Reference - Page 614

passwdCfg The password expiration policy forces expiration of a password after a specified period of time. When a user's password expires, the user must change the password to complete the authentication process. A warning that password expiration is approaching is displayed when the user logs in. The number of days prior to password expiration during which warnings commence is a configurable parameter. Password expiration does not disable or lock out the account. The password expiration policy is enforced across all user accounts except the root and factory accounts. Account Lockout Policy The account lockout policy disables a user account when the user exceeds a configurable number of failed login attempts. The mechanism can be configured to keep the account locked until explicit administrative action is taken to unlock the account or locked accounts can be automatically unlocked after a specified period. An administrator can unlock a locked account at any time. Note that the account locked state is distinct from the account disabled state. The account lockout policy is enforced across all user accounts except the root, factory, and SecurityAdmin role accounts. A separate configuration option, available to the SecurityAdmin and Admin role accounts, may be used to enable and disable applications of the account lockout policy to Admin role accounts. A failed login attempt counter is maintained for each user on each switch instance. The counters for all user accounts are reset to zero when the account lockout policy is enabled. The counter for an individual account is reset to zero when the account is unlocked after the lock-out duration period expires. Notes The execution of this command is subject to Virtual Fabric restrictions that may be in place. Refer to "Using Fabric OS Commands" and "Command Availability" for details. Operands This command takes as input an operand and its associated arguments. When invoked without operands, the command prints the usage. --showall Displays the password configuration parameters. --showuser username Displays the password configuration parameters for a specific user. --setdefault Resets all password policies to their default values. --set Configures a specified password policy. -charset value Specifies the minimum criteria on the character set (upper and lowercase letters and special characters) to be used in the password. The default value is 0. -allowuser [yes|no] Activates (no) or deactivates (yes) the validation check to determine if the username is used in the password. If activated, the username both in forward and reverse direction cannot be used in the password. For example, if username is "testuser", the password "testuser123" or "resutset567" is not allowed. The default value is "yes". -lowercase value Specifies the minimum number of lowercase alphabetic characters that must occur in the password. The default value is 0. The maximum value must be less than or equal to the -minlength value. 590 Brocade Fabric OS Command Reference 53-1004112-02