Contents

1   Introduction

This document describes how to delete an account policy.

1.1   Prerequisites

This section describes the prerequisites, which must be fulfilled before using the procedure.

1.1.1   Conditions

The following conditions must apply:

• The user has sufficient access rights to perform the task, for example, the user has System Security Administrator role.
• An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.
• The account policy is known.

2   Procedure

To delete an account policy instance:

1. Navigate to the AccountPolicy Managed Object (MO), for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,AccountPolicy=1

2. Show the user accounts that use this account policy:

   (AccountPolicy=1)>show reservedByAccount

   The following is an example output:

   "ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,⇒ UserManagement=1,LocalAuthenticationMethod=1,⇒ UserAccountM=1,UserAccount=joedoe" "ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,⇒ UserManagement=1,LocalAuthenticationMethod=1,⇒ UserAccountM=1,UserAccount=doegeo"

3. Change AccountPolicy for a user account.
4. Navigate to the UserAccount MO, for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,UserAccountM=1,UserAccount=joedoe

5. Enter Config mode:

   (UserAccount=joedoe)>configure

6. Change the account policy for the user account, by setting the reference to the appropriate AccountPolicy MO, for example:

   (config-UserAccount=joedoe)>accountPolicy="ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1,AccountPolicy=2"

7. Commit the settings:

   (config-UserAccount=joedoe)>commit

8. Are there more user accounts to change that was listed in step 2?

   Yes: Proceed with Step 3.

   No: Continue with next step.

9. Navigate to LocalAuthenticationMethod MO, for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1

10. Enter Config mode:

    (LocalAuthenticationMethod=1)>configure

11. Delete the AccountPolicy MO, for example:

    (config-LocalAuthenticationMethod=1)>no AccountPolicy=1

12. Commit the deletion:

    (config-LocalAuthenticationMethod=1)>commit

13. Verify the deletion:

    (LocalAuthenticationMethod=1)>show

    The following is an example output:

    LocalAuthenticationMethod=1 userLabel="Local Authentication Method" AccountPolicy=2 AdministratorAccount=la-admin PasswordPolicy=2 PasswordQuality=1 UserAccountM=1