IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Password expiration period must be at most 60 days

    Posted Thu December 26, 2024 12:21 PM

    Hello,

    I was trying password expiration cli commands in Guardium test environment. 

    Initially, I used the command "show password expiration cli"  and it gave me, "Password expires after 365 days". Below is the screenshot.

    After that I ran "store password expiration cli 60" and it gave the output "Password expires after 60 days". Below is the screenshot.
    After that, I tried to revert the password expiration back to 365 days using the command "store password expiration cli 365". But it is not working and I could not find any workaround to revert it back. 
    How I can resolve this issue?
    Thanks in advance.


    ------------------------------
    Inura Guwanjith Katulanda Katulanda Dewage
    ------------------------------


  • 2.  RE: Password expiration period must be at most 60 days

    Posted Mon December 30, 2024 06:24 AM

    Hi Inura,

    I think this is a bug because the expiration setting for the CLI user is maximum 60 days.



    ------------------------------
    Veysel Gundogdu
    Senior Security Consultant / Managing Partner
    Mernus Bilisim Teknolojileri A.S
    Istanbul
    ------------------------------



  • 3.  RE: Password expiration period must be at most 60 days

    Posted Mon December 30, 2024 10:36 AM

    Hello Inura:

    Password expiration changed after a last patch applied, before 11.4 version the password expiration you could put in 0 for cli, if you don't liked changed and have a strong password, but after a few patches, this changed to the default in 60 days and this can't  change it.

    i.e.

    store password expiration cli 90
    Password expiration period must be at most 60 days.

    err

    show password expiration cli
    Password expires after 60 days
    ok

    Regards,



    ------------------------------
    Carlos Espinoza Chandia
    ------------------------------



  • 4.  RE: Password expiration period must be at most 60 days

    Posted Mon December 30, 2024 10:48 AM

    The maximum number of days for cli is 60.

    https://www.ibm.com/docs/en/gdp/11.5?topic=commands-user-account-password-authentication-cli

     

    Jennifer Dodson

    Brand Technical Specialist

    Global Sales, Financial Services

    1 469 796 8337 Mobile

    jennifer.dodson@ibm.com

     

    IBM