Command Reference Guide

578 Fabric OS Command Reference
53-1002746-01
passwdCfg
2
passwdCfg
Manages the password policies.
SYNOPSIS passwdcfg --set options value
passwdcfg --setuser username options value
passwdcfg --disableadminlockout
passwdcfg --enableadminlockout
passwdcfg --setdefault
passwdcfg --showall
passwdcfg --showuser username
passwdcfg --deleteuser username
passwdcfg --deleteuser -all
passwdcfg --help
DESCRIPTION Use this command to manage password policies.
Use --set to configure the following password policies:
• Password strength policy
• Password history policy
• Password expiration policy
• Account lockout policy
Password Strength Policy
The password strength policy enforces a set of rules that new passwords must satisfy. Configurable rules
include lowercase and uppercase characters, numbers, punctuation occurrences and minimum length
values. It is enforced only when a new password is defined. The password strength policy is enforced
cross all user accounts. When a password fails more than one of the strength attributes, an error is
reported for only one of the attributes at a time.
Password History Policy
The password history policy prevents reuse of a recently used password. The password history policy is
enforced across all user accounts when users are setting their own password. It is not enforced when an
administrator sets a password for another user, but the user's password history is preserved and the
password set by the administrator is recorded in the user's password history.
Password Expiration Policy
The password expiration policy forces expiration of a password after a specified period of time. When a
user's password expires, the user must change the password to complete the authentication process. A
warning that password expiration is approaching is displayed when the user logs in. The number of days
prior to password expiration during which warnings commence is a configurable parameter. Password
expiration does not disable or lock out the account. The password expiration policy is enforced across all
user accounts except the root and factory accounts.
Account Lockout Policy