HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, December 2009)

64 Managing user accounts
• Only users with Admin roles can change the password for another account. When changing an Admin
account password, you must provide the current password.
• An admin with ADlist 0-10 cannot change the password on an admin, user, or any role with an ADlist
11-25. The user account being changed must have an ADlist that is a subset of the account that is
making the change.
• A new password must have at least one character different from the old password.
• You cannot change passwords using SNMP.
NOTE: Starting with Fabric OS 5.1.0, password policies apply. Starting with Fabric OS 4.4.0, accounts
with the Admin role can use Web Tools to change passwords. Starting with Fabric OS 3.2.0, you cannot
change default account names.
For information on password behavior when you upgrade (or downgrade) firmware, see ”Upgrading and
downgrading firmware” on page 176.
To change the password for the current login account:
1. Connect to the switch and log in using an admin account.
2. Issue the following command:
passwd
3. Enter the requested information at the prompts.
To change the password for a different account:
1. Connect to the switch and log in using an admin account.
2. Issue the following command:
passwd [“user_account”]
where [“user_account”] is the name of the account for which the password is being changed.
3. Enter the requested information at the prompts.
Configuring the local user database
This section covers the following topics:
• ”Distributing the local user database” on page 64
• ”Protecting the local user database from distributions” on page 65
• ”Configuring password policies” on page 65
Distributing the local user database
Distributing the local switch user database and passwords to other switches in the fabric causes the
distributed database to replace (overwrite) the database on the target switch. The ‘Locked’ status of a user
account is not distributed as part of local user database distribution.
When distributing the user database, the database may be rejected for one of the following reasons:
• One of the target switches does not have Fabric OS 5.3.0 or later.
• One of the target switch’s user database is protected.
Distribute the user database and password policies only to Fabric OS 5.2.0 or later switches; the
distribution command fails if any of the target switches are an earlier version.
To distribute the local user database:
When distributing the local user database, all user-defined accounts residing in the receiving switches will
be logged out of any active sessions.
1. Connect to the switch and log in using an admin account.
2. Issue the following command:
distribute -p PWD -d <switch_list>