HP StorageWorks 2/16 - SAN Switch, Manual

Page: 136 / 250

Fabric OS procedures user guide
136 Fabric OS 3.x Document Addendum
Changing an Account Password
At each level of account access, you can change passwords for that account and accounts that
have lesser privileges.
If you log in to a user account, you can change only that account’s password.
If you log in to an admin account, you can change admin and user passwords. You must
provide the old password when the account being changed has the same or higher privileges
than the current login account. For example, when logged in as admin, you need admin
passwords to change passwords for admin accounts (except when you change the default user
account password at login), but you do not need user passwords to change passwords for user
accounts.
A new password must have at least one character different from the old password. The
following rules also apply to passwords:
■
You cannot change passwords using SNMP.
■
Password prompting is disabled when security mode is enabled.
■
Starting with Fabric OS v3.2.x, you cannot change default account names.
To change the password for the current login account:
1. Connect to the switch and log in as either admin or user.
2. Enter the following command:
passwd
3. Enter the requested information at the prompts.
To change the password for a different account:
1. Connect to the switch and log in as admin.
2. Enter the following command:
passwd name
3. Enter the requested information at the prompts.
If the named account has lesser privileges than the current account, the old password is not
required. If the named account has equal or higher privileges than the current account, you
are prompted to enter the old password.
Setting Up RADIUS AAA Service
Fabric OS supports RADIUS authentication, authorization, and accounting service (AAA).
When configured for RADIUS, the switch becomes a RADIUS client. In this configuration,
authentication records are stored in the RADIUS host server database. Login and logout
account name, assigned role, and time-accounting records are also stored on the RADIUS
server.
Set up RADIUS service through a secure connection such as SSH.
By default, RADIUS service is disabled, so AAA services default to the switch local database.
where
name
Specifies the account name.