Contents

1   Description

This instruction describes how to delete a password policy applicable for local Operation and Maintenance (O&M) user accounts.

2   Procedure

2.1   Delete Password Policy

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • The user has sufficient access rights to perform the task, for example, the user has System Security Administrator role.
  • An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.
  • The password policy to be deleted is known.
  • New password policy is known.

Steps

1. Navigate to the PasswordPolicy Managed Object (MO), for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,PasswordPolicy=1

2. Show the user accounts that use this password policy:

   (PasswordPolicy=1)>show reservedByAccount

   The following is an example output:

   "ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,⇒ UserManagement=1,LocalAuthenticationMethod=1,⇒ UserAccountM=1,UserAccount=joedoe" "ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,⇒ UserManagement=1,LocalAuthenticationMethod=1,⇒ UserAccountM=1,UserAccount=doegeo"

3. Change the PasswordPolicy for a user account.
4. Navigate to the UserAccount MO, for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,UserAccountM=1,UserAccount=joedoe

5. Enter Config mode:

   (UserAccount=joedoe)>configure

6. Change the password policy for the user account, by setting the reference to the appropriate PasswordPolicy MO, for example:

   (config-UserAccount=joedoe)>passwordPolicy="ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,PasswordPolicy=2"

7. Commit the settings:

   (config-UserAccount=joedoe)>commit

8. Are there more user accounts to change that was listed in step 2?

   Yes: Proceed with Step 3.

   No: Continue with next step.

9. Navigate to the LocalAuthenticationMethod MO, for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1

10. Enter Config mode:

    (LocalAuthenticationMethod=1)>configure

11. Delete the PasswordPolicy MO, for example:

    (config-LocalAuthenticationMethod=1)>no PasswordPolicy=1

12. Commit the deletion:

    (config-LocalAuthenticationMethod=1)>commit

13. Verify the deletion:

    (LocalAuthenticationMethod=1)>show

    The following is an example output:

    LocalAuthenticationMethod=1 userLabel="Local Authentication Method" AccountPolicy=1 AdministratorAccount=la-admin PasswordPolicy=2 PasswordQuality=1 UserAccountM=1