vms modify_pwd_settings

Prev Next

This command modifies VMS password settings.

Usage

vms modify_pwd_settings [--id ID]
                        [--min-pwd-length LENGTH]
                        [--enable-pwd-uppercase-validation]
                        [--disable-pwd-uppercase-validation]
                        [--enable-pwd-lowercase-validation]
                        [--disable-pwd-lowercase-validation]
                        [--enable-pwd-numeric-validation]
                        [--disable-pwd-numeric-validation]
                        [--enable-pwd-special-chars-validation]
                        [--disable-pwd-special-chars-validation]
                        [--pwd-change-timeout TIMEOUT]
                        [--pwd-expiration-timeout TIMEOUT]
                        [--tmp-pwd-expiration-timeout TIMEOUT]
                        [--max-failed-login-attempts ATTEMPTS] 
                        [--pwd-history-no-reuse-count COUNT]
                        [--enable-pwd-change-timeout]      
                        [--disable-pwd-change-timeout]
                        [--enable-pwd-expiration-timeout] 
                        [--disable-pwd-expiration-timeout]
                        [--enable-max-failed-login-attempts]
                        [--disable-max-failed-login-attempts]
                        [--enable-pwd-history-no-reuse-count]
                        [--disable-pwd-history-no-reuse-count]

Required Parameters

--id ID

Specifies the ID of the VMS resource.

Options

--min-pwd-length LENGTH

Sets the minimum required password length.

Specify LENGTH as a number of characters.

Default: 8

--enable-pwd-uppercase-validation

Enables requirement of at least one uppercase character in VMS passwords.

--disable-pwd-uppercase-validation

Disables requirement of at least one uppercase character in VMS passwords.

-enable-pwd-lowercase-validation

Enables requirement of at least one lowercase character in VMS passwords.

--disable-pwd-lowercase-validation

Disables requirement of at least one lowercase character in VMS passwords.

--enable-pwd-numeric-validation

Enables requirement of at least one numeric character in VMS passwords.

--disable-pwd-numeric-validation

Disables requirement of at least one numeric character in VMS passwords.

--enable-pwd-special-chars-validation

Enables requirement of at least one non-alphanumeric character in VMS passwords.

--disable-pwd-special-chars-validation

Disables requirement of at least one non-alphanumeric character in VMS passwords.

--pwd-change-timeout TIMEOUT

Sets the time frame within which VMS managers may not change their passwords again after setting a new password if password change timeout is enabled.

Specify TIMEOUT as an integer followed by a prefix for time units. D for days, H for hours, M for months.

Default: 24H

--pwd-expiration-timeout TIMEOUT

Sets the password expiration timeout, which applies if password expiration timeout is enabled.

Specify TIMEOUT as an integer followed by a prefix for time units: D for days, M for months. The minimum valid value is one day.

Default: 180D

--tmp-pwd-expiration-timeout TIMEOUT

Sets the expiration timeout for the new managers' temporary passwords.

Specify TIMEOUT as an integer followed by a prefix for time units: H for hours, D for days, M for months. The minimum valid value is one hour.

Default: 7D

--max-failed-login-attempts ATTEMPTS

Sets the number of failed login attempts after which password lockout occurs if enabled.

Specify ATTEMPTS as an integer.

Default: 10

--pwd-history-no-reuse-count COUNT

Sets the number of previous passwords that VMS managers may not reuse if prevention of password reuse is enabled.  

Specify COUNT as an integer.

Default: 8

--enable-pwd-change-timeout

Enables prevention of password changes within the time frame set by --pwd-change-timeout.

--disable-pwd-change-timeout

Disables prevention of password changes within the time frame set by --pwd-change-timeout.

--enable-pwd-expiration-timeout

Enables expiration of VMS passwords after the time period set by --pwd-expiration-timeout.

--disable-pwd-expiration-timeout

Disables expiration of VMS passwords.

--enable-max-failed-login-attempts

Enables password lockout after a number of failed login attempts. The number of failed attempts is set by --max-failed-login-attempts.

--disable-max-failed-login-attempts

Disables password lockout after a number of failed login attempts.

--enable-pwd-history-no-reuse-count

Enables prevention of VMS manager users from reusing a number of previous passwords, set by --pwd-history-no-reuse-count.

--disable-pwd-history-no-reuse-count

Disables prevention of VMS manager users from reusing a number of previous passwords.

Examples

To enable password expiration and set password expiration to 60 days:

vcli: admin> vms modify_pwd_settings --enable-pwd-expiration-timeout --pwd-expiration-timeout 60D

To enable enforcement of all forms of password complexity and to enforce manager lockout after 5 failed login attempts:

vcli: admin> vms modify_pwd_settings --enable-pwd-uppercase-validation --enable-pwd-lowercase-validation --enable-pwd-numeric-validation --enable-pwd-special-chars-validation --enable-max-failed-login-attempts --max-failed-login-attempts 5