HP AE370A - Brocade 4Gb SAN Switch 4/12, Administrator'S Manual

Page: 64 / 447

64 Managing user accounts
How to accept the user database
1. Connect to the switch.
2. Enter the following command:
where PWD is one of the three supported database policies. Supported policy databases are SCC,
DCC, PWD.
How to reject distributed user databases
1. Connect to the switch.
2. Enter the following command:
Configuring password policies
The password policies described in this section apply to the switch-local user database only. Configured
password policies (and all user account attribute and password state information) are synchronized across
CPs and remain unchanged after an HA failover. Password policies can also be manually distributed
across the fabric.
All password policies are enforced during logins to the standby CP. However, you might observe that the
password enforcement behavior on the standby CP is inconsistent with prior login activity because
password state information from the active CP is automatically synchronized with the standby CP, thereby
overwriting any password state information that was previously stored there. Also, password changes are
not permitted on the standby CP.
Password authentication policies configured using the
passwdCfg
command are not enforced during
initial prompts to change default passwords.
• Password strength
• Password history
• Password expiration
• Account lockout
NOTE: Secure mode supports only the default values of the password policies. If you attempt to enable
secure mode after configuring changing any of the password policies you receive an error.
How to set the password strength policy
The password strength policy is enforced across all user accounts, and enforces a set of format rules to
which new passwords must adhere. The password strength policy is enforced only when a new password is
defined. Use the following attributes to set the password strength policy:
• Lowercase
Specifies the minimum number of lowercase alphabetic characters that must appear in the password.
The default value is zero. The maximum value must be less than or equal to the
MinLength
value.
• Uppercase
Specifies the minimum number of uppercase alphabetic characters that must appear in the password.
The default value is zero. The maximum value must be less than or equal to the
MinLength
value.
• Digits
Specifies the minimum number of numeric digits that must appear in the password. The default value is
zero. The maximum value must be less than or equal to the
MinLength
value.
• Punctuation
Specifies the minimum number of punctuation characters that must appear in the password. All
printable, non-alphanumeric punctuation characters except colon “:” are allowed. The colon character
fddCfg --localaccept PWD
fddCfg --localreject PWD