Recovering Accounts; Changing Local Account Passwords - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

To change account parameters:
When changing account parameters, if you change the ADlist for the user account, all of the currently
active sessions for that account will be logged out. For more information about changing the Admin
Domain on an account, see Chapter 6,
1. Connect to the switch and log in using an admin account.
2. Issue the following command:
userconfig --change username [-r rolename] [-h admindomain_ID]
[-a admindomain_ID_list] [-d description] [-e yes | no] -u -x
where:
username
-r rolename
-h admindomain_ID
-a admindomain_ID_list
-d description
-e
-u
-x

Recovering accounts

The following conditions apply to recovering user accounts:
• The attributes in the backup database replace the attributes in the current account database.
• An event is stored in the system message log, indicating that accounts have been recovered.
To recover an account:
1. Connect to the switch and log in using an admin account.
2. If a backup database exists, issue the following command.
userConfig --recover
The AD list for a user account is not recovered; recovered accounts are given access only to AD0,
regardless of previous AD assignments

Changing local account passwords

The following rules apply to changing passwords:
• Users can change their own passwords.
"Managing administrative
Specifies the account for which parameters are being changed.
Changes the role to one of the names listed in
page 58. In secure mode, role can also be changed to
nonfcsadmin. An account cannot change its own role. Accounts
with Admin role can change the role names of all user-defined
accounts, except those with Admin roles.
Optional: Changes the home Administrative Domain; if no
Administrative Domain is specified, the lowest numbered
Administrative Domain in the list is assigned.
Optional: Changes the Administrative Domains the user may
access; if no Administrative Domains are listed, the user is
automatically assigned to AD0. Use comma-separated lists,
ranges, or both. for example -a 0,9,10- 1 5,244.
Optional: Changes the description to the account. The
description field can consist of up to 40 printable ASCII
characters. The following characters are not allowed: asterisk
(*), single quotation mark ('), quotation mark ("), exclamation
point (!), semicolon (;), and colon (:).
Optional: Enables or disables the account. Enter yes to enable
the account or no to disable it. If you disable an account, all
active CLI sessions for that account are logged out. You can
enable or disable user-defined or default accounts.
Unlocks the user account.
Specifies an expired password that must be changed the first
time the user logs in.
domains" on page 153.
Table 8
Fabric OS 6.1.1 administrator guide
on
63