To recover user-defined accounts, Changing an account password – HP Brocade 4Gb SAN Switch for HP BladeSystem p-Class User Manual
Page 45
Fabric OS 5.0.0 procedures user guide
45
2.
Enter the following command:
userConfig --change
username [-r rolename] [-d description] [-e yes | no]
Accounts with the admin role can change information for accounts that have lesser permissions. Accounts
with the user role cannot.
To recover user-defined accounts
If a backup account exists (in secure mode), you can recover it with the following command:
userConfig --recover
The following conditions apply to recovering user accounts:
•
Only accounts with admin or higher roles can recover accounts.
•
The attributes in the backup database replace the attributes in the current account database.
•
An event is stored in the system message log indicating that accounts have been recovered.
Changing an account password
At each level of account access, you can change passwords for that account and accounts that have
lesser privileges.
If you log in to a user account, you can only change that account’s password.
If you log in to an admin account, you can change admin and user passwords. You must provide the old
password when the account being changed has the same or higher privileges than the current login
account. For example, when logged in as admin, you need admin passwords to change passwords for
admin accounts (except when you change the default user account password at login), but you do not
need user passwords to change passwords for user accounts.
A new password must have at least one character different than the old password. The following rules
also apply to passwords:
•
You cannot change passwords using SNMP.
where:
username
An option that changes the account attribute for username. The account
must already exist.
-r rolename
An option that changes the role: either admin or user in nonsecure mode;
admin, user, or nonfcsadmin in secure mode.
An account cannot change its own role.
You can only change the role name of a user-defined account with a
lower level of authorization.
-d description
An option: the account description. The description field can be up to 40
printable ASCII characters long. The following characters are not allowed:
asterisk (‘), quotation mark (“), exclamation point (!), semi-colon (;), and
colon (:).
You can only change the description of a user-defined account with a
lower level of authorization.
-e
Optionally, enter
yes
to enable the account or enter
no
to disable it. If
you disable an account, all active CLI sessions for that account are
logged out. You can enable or disable user-defined or default accounts.