logo

Manual Pages


Table of Contents

NAME

na_passwd - modify the system administrative user's password

SYNOPSIS

passwd

rsh-only usage:

passwd oldpassword newpassword [ username ]

DESCRIPTION

passwd changes the filer's administrative user's password. First it prompts you for the login name (if any non-root users are configured). Then, if you are not logged in as the root user, it prompts you for the current password. If you type the current password correctly (or were the root user and weren't required to type in the current password), the filer requests a new password. The passwd command imposes no minimum length or special character requirements for " root " or for " Administrator ". As with any password, it is best to choose a password unlikely to be guessed by an intruder. All non-root administrative user's passwords should meet the following restrictions:

- it should be at least 6 characters long

- it should contain at least two alphabetic characters

-
it should contain at least one digit or special character

By default, the above criteria are enforced by the filer when a new password is given. However, the security.passwd.rules.enable option can be used to prevent the
restrictions from being enforced. See na_options(1) for additional information.

If the filer is booted from floppy disk, selection "(3) Change password" enables you to reset the "root" password without entering the old password. This is useful for the forgetful.

The second style of using the passwd command, shown in the SYNOPSIS above, is only allowed when you execute the password command using rsh. (Since rsh doesn't allow prompting, all the necessary values must be put on the commandline.) If you do not provide an explicit username as the third argument, "root" is assumed.

CLUSTER CONSIDERATIONS

Each filer in a cluster can have a different password. However, in takeover mode, use only the password set on the live filer to access the consoles of both filers. You do not need to enter the failed filer's password to execute commands in partner mode.

Because the password for the failed filer becomes unnecessary after a takeover, you do not have increased security by assigning different passwords to the filers in a cluster. Network Appliance recommends that you use the same password for both filers.

VFILER CONSIDERATIONS

When run from a vfiler context, (e.g. via the vfiler run command), passwd operates on the concerned vfiler, and can only be used to change the password of a user of that vfiler.

SEE ALSO

na_partner(1), na_useradmin(1), na_options(1), na_vfiler(1)


Table of Contents