Description

• Role name (-role)
• Minimum size of the password, in characters (-passwd-minlength)
• Whether the password requires alphanumeric characters (-passwd-alphanum)
• Number of previous passwords that cannot be reused (-disallowed-reuse)
• Minimum number of days that must elapse before users can change their passwords (-change-delay)

• Minimum length of the user name, in characters (-username-minlength)
• Whether the user name requires alphanumeric characters (-username-alphanum)
• Minimum length of the password, in characters (-passwd-minlength)
• Whether the password requires alphanumeric characters (-passwd-alphanum)
• Minimum number of special characters required in password (-passwd-min-special-chars)
• Password-expiration time, in days (-passwd-expiry-time)
• Whether the password must be changed at the initial login (-require-initial-passwd-update)
• Maximum number of failed login attempts permitted before the account is locked out (-max-failed-login-attempts)
• Number of days for which the user account is locked after the maximum number of failed login attempts is reached (-lockout-duration)
• Number of previous passwords that cannot be reused (-disallowed-reuse)
• Minimum number of days that must elapse before users can change their passwords (-change-delay)

Parameters

{  [-fields <fieldname>, ...]

|  [-instance ]  }

[-vserver <vserver name>] - Vserver

[-role <text>] - Role Name

[-username-minlength <integer>] - Minimum Username Length Required

[-username-alphanum {enabled|disabled}] - Username Alpha-Numeric

[-passwd-minlength <integer>] - Minimum Password Length Required

[-passwd-alphanum {enabled|disabled}] - Password Alpha-Numeric

[-passwd-min-special-chars <integer>] - Minimum Number of Special Characters Required In The Password

[-passwd-expiry-time <unsigned32_or_unlimited>] - Password Expires In (Days)

[-require-initial-passwd-update {enabled|disabled}] - Require Initial Password Update on First Login

[-max-failed-login-attempts <integer>] - Maximum Number of Failed Attempts

[-lockout-duration <integer>] - Maximum Lockout Period (Days)

[-disallowed-reuse <integer>] - Disallow Last 'N' Passwords

[-change-delay <integer>] - Delay Between Password Changes (Days)

Examples

cluster1::> security login role config show
                          ----- Password Restrictions -----
Vserver     RoleName      Size AlphaNum NoReuse ChangeDelay
----------- ------------- ---- -------- ------- -----------
vs          vsadmin          8  enabled       6      0 days
vs          vsadmin-protocol 8  enabled       6      0 days
vs          vsadmin-readonly 8  enabled       6      0 days
vs          vsadmin-volume   8  enabled       6      0 days
cluster1    admin            6  enabled       6      0 days
cluster1    readonly         6  enabled       6      0 days