HP StorageWorks Fabric OS 6.2 administrator guide (5697-0016, May 2009)

74 Managing user accounts
• An admin with ADlist 0-10 or LFlist 1-10 cannot change the password on an admin, user, or any role
with an ADlist 11-25 or LFlist 11-128. The user account being changed must have an ADlist that is a
subset of the account that is making the change.
• A new password must have at least one character different from the old password.
• You cannot change passwords using SNMP.
NOTE: Starting with Fabric OS 5.1.0, password policies apply. Starting with Fabric OS 4.4.0,
accounts with the Admin role can use Web Tools to change passwords. Starting with Fabric OS
3.2.0, you cannot change default account names.
For information on password behavior when you upgrade or downgrade firmware, see ”Upgrading and
downgrading firmware” on page 214.
Changing the password for the current login account
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the following command:
passwd
3. Enter the requested information at each prompt.
Changing the password for a different account
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the following command:
passwd ["user_account"]
where “user_account” is the name of the account for which the password is being changed.
3. Enter the requested information at the prompts.
Local account database distribution
Distributing the local switch user database and passwords to other switches in the fabric causes the
distributed database to replace (overwrite) the database on the target switch. The Locked status of a user
account is not distributed as part of local user database distribution.
When distributing the user database, the database may be rejected by a switch for one of the following
reasons:
• One of the target switches does not have Fabric OS 5.3.0 or later.
• One of the target switch’s user database is protected.
IMPORTANT: Distribute the user database and password policies only to Fabric OS 5.2.0 or later
switches; the distribution command fails if any of the target switches are an earlier version.
Distributing the local user database
When distributing the local user database, all user-defined accounts residing in the receiving switches are
logged out of any active sessions.
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the following command:
distribute -p PWD -d switch_list
where switch_list is a semicolon-separated list of switch domain IDs, switch names, or switch WWN
addresses. You can also specify -d “*” to send the local user database only to Fabric OS 5.2.0 or
later switches in the fabric.