How to set RSA ACE/Server user password lifetime to greater than 3 years
Originally Published: 2004-04-06
Article Number
Applies To
RSA ACE/Server creates use passwords (via host or remote admin) with a death date of current time + 3 years
RSA ACE/Server Administration API can set the password lifetime of a new user to up to 10 years
Issue
Resolution
#!./tcl-sd
#connect to Server
puts [Sd_ApiInit "" "" 1]
#add user tuser, password "1234" with 10 year lifetime
set tokSerial [Sd_AssignPassword user test tuser /bin/sh 1234 3653 0]
puts "Created password token $tokSerial"
Sd_ApiEnd
NOTE: password lifetime is a different concept than the System parameter "passwords expire in". The System parameter controls how long a password can be used until the user is requested to change it during an authentication. Password lifetime, on the other hand, defines how long before a password must be updated by administrator action.
Related Articles
How to recreate a PKCS#12 and/or to change PKCS#12 password? Number of Views Creating an account password of greater than 100 characters for On-Demand Authentication (ODA) configuration on RSA Authen… Number of Views The "User Cannot change the password" flag for Active Directory Account creation in RSA Identity Governance and Lifecycle … Number of Views Functionality requiring the retrieval of encrypted passwords is failing after a database restore in RSA Identity Governanc… Number of Views RSA Identity Governance & Lifecycle Access Fulfillment Express (AFX) reports this item failed: password does not meet comp… Number of Views
Trending Articles
Unable to login to RSA Authentication Manager Security Console as super admin Authentication Manager Administration Server with operations console service Fails to Start with "No config.xml Was Found"… Authentication Manager Security Console and Operations Console Inaccessible After Certificate Update RSA Authentication Manager Upgrade Process Authentication Manager How to Retrieve the LDAPS Certificate and Configure an External Identity Source to Use LDAPS
Don't see what you're looking for?
