Changing the password policy
You can customize the password policies by setting rules for the passwords that are used by the NetBackup Flex Scale local users. You can set rules for password complexity, password age, and password lockout. Password complexity specifies the number and type of characters a password must include. Password age defines the duration for which the password is valid. Password lockout specifies the number of failed attempts because of incorrect usage of passwords after which a user is prevented from logging in to the account.
If the Security Technical Implementation Guide (STIG) mode is enabled for the cluster, the password policy cannot be modified.
The default password policy for a local user is as follows:
Password complexity:
Minimum characters: 8
Minimum numbers: 1
Minimum lowercase characters: 1
Minimum uppercase characters: 1
Minimum special characters: 1
To edit the password policy:
- Use any one of the following options to log in using the user account that you created:
Use a user account with both Appliance Administrator and NetBackup Administrator role, or a user account with only an Appliance administrator role to log in to the NetBackup Flex Scale web interface
https://ManagementServerIPorFQDN/webuiwhere ManagementServerIPorFQDN is the public IP address or the FQDN that you specified for the NetBackup Flex Scale management server during the cluster configuration. In the left pane click Cluster Monitor > Infrastructure, in the upper-right corner click Cluster dashboard, and when prompted click Open cluster dashboard.Use a user account with an Appliance Administrator role to log in to the NetBackup Flex Scale infrastructure management console
https://ManagementServerIPorFQDN:14161where ManagementServerIPorFQDN is the public IP address or the FQDN that you specified for the NetBackup Flex Scale management server during the cluster configuration.
- In the left navigation pane, click Settings and then click User management.
- Click Manage password policy.
- On the Manage password policy page, click Edit.
Note:
The Edit button is disabled and the password policy cannot be edited if the STIG mode is enabled.
- If you want your password policy to comply with STIG, select Reset to STIG default values to fill in the default values for all the parameters.
- Edit the parameters as required. To ignore a rule, leave the corresponding parameter blank. After making the changes click Save.
Table:
Parameter | Description |
|---|---|
Minimum characters | Minimum number of characters to include in a password |
Minimum uppercase characters | Minimum number of uppercase characters to include in a password |
Maximum repetitive characters of the same class | Maximum number of consecutive uppercase, lowercase, numeric, and special characters |
Minimum numbers | Minimum number of numeric characters |
Minimum special characters | Minimum number of special characters in a password |
Minimum character classes | Minimum character classes to include in a password. Character classes include uppercase, lowercase, numeric, and special characters. |
Minimum lowercase characters | Minimum number of lowercase characters |
Maximum repetitive characters | Maximum number of characters that can be repeated in a password. |
Character difference with old password | Number of characters the new password must differ by from the previous password |
Days after which password can be changed | Number of days after which a password can be changed |
Days after which password must be changed | Number of days after which a password must be changed |
Days before warning message | Number of days before the password expires to display a warning |
Minimum different passwords before allowing reuse | Number of unique passwords before a previous password can be reused |
Number of incorrect login attempts before lockout | Number of failed login attempts after which the account gets locked |
Time before locked account is reenabled | Duration in seconds the account remains locked |
Time between login failures before account lockout | Number of seconds between consecutive failed login attempts |