Skip to main content

accseccfg command

Use this command to display and configure account security settings.

Running the accseccfg command with no options displays all account security information. The following table shows the arguments for the options.

Table 1. accseccfg command.

The following table is a multi-row three column table consisting of the options, option descriptions, and associated values for the options.

OptionDescriptionValues
-amSets user authentication method.local, ldap, localldap, ldaplocal
-lpLockout period after maximum login failures (minutes).Between 0 and 2880, 0 = lockout period does not expire
-pePassword expiration time period (days).Between 0 and 365, 0 = never expire
-pewPassword expiration warning time period
Note
The Password expiration warning time period must be less than Password expiration time period.
Between 0 and 30, 0 = never warn
-pcPassword complexity rules enabled.on, off
-plPassword length.If password complexity rules are enabled, the password length is between 8 and 32. Otherwise, it is between 0 and 32.
-ciMinimum password change interval (hours).between 0 and 240, 0 = change immediately
-lfMaximum number of login failures.Between 0 and 10, 0 = never locked
-chgdftChange default password after first login.on, off
-chgnewChange new user password after first login.on, off
-rcPassword reuse cycle.Between 0 and 10, 0 = reuse immediately
-wtWeb and Secure Shell inactivity session timeout (minutes).Between 0 and 1440


Example:
system> accseccfg
-legacy
-am local
-lp 2
-pe 0
-pr off
-pd 1
-pl 4
-ci 0
-lf 0
-chgdft off
-chgnew off
-rc 0
-wt user
system>