IBM DCE 3.2: Changing account password expiration policy and updating CDS/GDA servers with changed info
Changing account password expiration policy and updating CDS/GDA servers with changed info.
Resolving the problem
The account password expiration policy can be changed and CDS/GDA servers can be updated with changed info by following the steps mentioned below.
1. Check if the password life policy is set in organization using the below command.
dcecp -c org show none -all
If no policy is set, it displays output similar to the following which means organisation 'none' has no
password life policy set.
Use the below command syntax to set password life policy.
dcecp -c org modify none -pwdlife=(+/-)dd-hh:mm:ss.sssI
If policy is set, it shows policy related data along with other information as the following.
2. If the account password is expired, please change it and check the password change with below
rgy_edit -v -f hosts/<hostname>/<account_name> | grep changed
The command will show the latest date and time of password change.
changed by: /.../testcell/cell_admin 2009/06/30.00:00
password is: valid, was last changed: 2009/06/30.00:00
3. The account password change information doesn't automatically get updated to CDS and GDA servers
and it continues to show the old date and time of password change. Please check the last password
change information on CDS server using the below command syntax.
rgy_edit -v -f hosts/<hostname>/cds-server | grep changed
This displays the old date and time of password change as below.
changed by: /.../testcell/hosts/<hostname>/cds-server 2007/06/29.23:55
password is: valid, was last changed: 2007/06/29.23:55
4. To update the CDS and GDA servers with latest password change information, the services should be
restarted. After restarting the services, check for the password change updates as mentioned in step 4 which should show the latest changed information.