PowerScaleOneFS CLI Command Reference

Syntax

isi auth local modify <provider-name>
  [--authentication {yes | no}]
  [--create-home-directory {yes | no}]
  [--home-directory-template <string>]
  [--lockout-duration <duration>]
  [--lockout-threshold <integer>]
  [--lockout-window <duration>]
  [--login-shell <string>]
  [--machine-name <string>]
  [--min-password-age <duration>]
  [--max-password-age <duration>]
  [--min-password-length <integer>]
  [--password-prompt-time <duration>]
  [--password-complexity{lowercase | uppercase |
    numeric | symbol | repeat}]
  [--clear-password-complexity]
  [--add-password-complexity {lowercase | uppercase |
    numeric | symbol | repeat}]
  [--remove-password-complexity {lowercase | uppercase |
    numeric | symbol | repeat}]
  [--password-history-length <integer>]
  [--password-chars-changed <integer>]
  [--password-percent-changed <integer>]
  [--password-hash-type {NTHash | SHA256 | SHA512}]
  [--max-inactivity-days <integer>]
  [--delete-password-hashes]
  [--delete-password-history]
  [--verbose]

Options

<provider-name>

Specifies the name of the local provider to modify.

--authentication {yes | no}

Uses the provider for authentication as well as identity. The default setting is yes.

--create-home-directory {yes | no}

Creates a home directory the first time a user logs in.

--home-directory-template <string>

Specifies the path to use as a template for naming home directories. The path must begin with /ifs and can include special character sequences that are dynamically replaced with strings at home directory creation time that represent specific variables. For example, %U, %D, and %Z are replaced with the user name, provider domain name, and zone name, respectively. For more information, see the Home directories section.

--lockout-duration <duration>

Sets the length of time that an account will be inaccessible after multiple failed login attempts.

--lockout-threshold <integer>

Specifies the number of failed login attempts after which an account will be locked out.

--lockout-window <duration>

Sets the time in which the number of failed attempts specified by the --lockout-threshold option must be made for an account to be locked out. Duration is specified in the format <integer>[{Y | M | W | D | H | m | s}].

--login-shell <string>

Specifies the path to the UNIX login shell.

--machine-name <string>

Specifies the domain to use to qualify user and group names for the provider.

--min-password-age <duration>

Sets the minimum password age, in the format <integer>[{Y | M | W | D | H | m | s}].

--max-password-age <duration>

Sets the maximum password age, in the format <integer>[{Y | M | W | D | H | m | s}].

--min-password-length <integer>

Sets the minimum password length.

--password-prompt-time <duration>

Sets the remaining time until a user is prompted for a password change, in the format <integer>[{Y | M | W | D | H | m | s}].

--password-complexity {lowercase | uppercase | numeric | symbol | repeat}

Specifies the conditions that a password is required to meet. A password must contain at least one character from each specified option to be valid. For example, if lowercase and numeric are specified, a password must contain at least on lowercase character and one digit to be valid. Symbols are valid, excluding # and @. Specify --password-complexity for each additional complexity option.

--clear-password-complexity

Clears the list of parameters against which to validate new passwords.

--add-password-complexity {lowercase | uppercase | numeric | symbol | repeat}

Adds items to the list of parameters against which to validate new passwords. Repeat this command to specify additional password-complexity options. Specify --add-password-complexity for each additional complexity option.

--remove-password-complexity {lowercase | uppercase | numeric | symbol | repeat}

Removes items from the list of parameters against which to validate new passwords. Specify --remove-password-complexity for each additional complexity option.

--password-history-length <integer>

Specifies the number of previous passwords to store to prevent reuse of a previous password. The max password history length is 24.

--password-chars-changed <integer>

Sets the minimum number of characters required to be changed when a password is updated.

--password-percent-changed <integer>

Sets the minimum percent of characters required to be changed when a password is updated.

--password-hash-type (NTHash | SHA256 | SHA512)

Indicates which password hash algorithm to use.

--max-inactivity-days <integer>

Sets the maximum number of days a user account can be inactive before it will be disabled.

--delete-password-hashes

Deletes all password hashes that do not match the Password Hash Type and forces a password change at the next login.

--delete-password-history

Deletes the password histories for all local users.

--verbose | -v

Displays more detailed information.