IBM DCE 3.2: Changing account password expiration policy and updating CDS/GDA servers with changed info

The account password expiration policy can be changed and CDS/GDA servers can be updated with changed info by following the steps mentioned below.

1. Check if the password life policy is set in organization using the below command.


dcecp -c org show none -all



If no policy is set, it displays output similar to the following which means organisation 'none' has no

password life policy set.

{fullname {}}

{orgid 12}

{uuid 0000000c-64da-21de-b202-00025576118f}

nopolicy


Use the below command syntax to set password life policy.
dcecp -c org modify none -pwdlife=(+/-)dd-hh:mm:ss.sssI


If policy is set, it shows policy related data along with other information as the following.

{fullname {}}

{orgid 12}

{uuid 0000000c-64da-21de-b202-00025576118f}

{acctlife unlimited}

{pwdalpha yes}

{pwdexpdate none}

{pwdlife +90-00:00:00.000I-----}

{pwdminlen 8}

{pwdspaces no}



2. If the account password is expired, please change it and check the password change with below
command syntax.

rgy_edit -v -f hosts/<hostname>/<account_name> | grep changed



The command will show the latest date and time of password change.

changed by: /.../testcell/cell_admin 2009/06/30.00:00

password is: valid, was last changed: 2009/06/30.00:00



3. The account password change information doesn't automatically get updated to CDS and GDA servers
and it continues to show the old date and time of password change. Please check the last password
change information on CDS server using the below command syntax.

rgy_edit -v -f hosts/<hostname>/cds-server | grep changed



This displays the old date and time of password change as below.

changed by: /.../testcell/hosts/<hostname>/cds-server 2007/06/29.23:55

password is: valid, was last changed: 2007/06/29.23:55



4. To update the CDS and GDA servers with latest password change information, the services should be
restarted. After restarting the services, check for the password change updates as mentioned in step 4 which should show the latest changed information.