User's Manual

Fortress ES-Series CLI Guide: Mesh Point CLI and Administrative Access
21
Audit setting of automatic causes the account to conform to
the global audit logging settings (refer to Section 4.7).
Alternatively, you can execute
add admin non-interactively with
valid switches and arguments in any order and combination:
# add admin -name <username> -state enable|disable -fullname <“Full Username”>
-desc <“description of account”> -role administrator|maintenance|logviewer
-passwordlock Y|N -passwordforcechange Y|N -password
<password> -passwordconfirm <password>
-gui enable|disable -console enable|disable -ssh enable|disable -audit
required|prohibited|automatic
The Mesh Point CLI returns [OK] when settings are
successfully changed.
NOTE: Changes to
the account you
are currently logged
onto will take effect the
next time you log on.
2.2.3.2 Updating and Deleting Administrator Accounts
Once an administrative account has been established, you
cannot change the user name associated with it. Use the
-name switch with the update command to reconfigure the
account of the administrator you specify. The same switches
and arguments used with
add admin (above) can be used to
edit other account settings:
# update admin -name <username> -state enable|disable -fullname <“Full Username”>
-desc <“description of account”> -role administrator|maintenance|logviewer
-passwordlock Y|N -passwordforcechange Y|N -oldpassword
<oldpassword> -password <password>
-passwordconfirm <password> -gui enable|disable -console enable|disable -ssh enable|disable
-audit required|prohibited|automatic -endsession
The -endsession switch, which takes no arguments, can be
used only with
update admin. It forces a current session of the
named administrative account to terminate immediately.
NOTE: If a manu-
ally added account
is the only account cur-
rently configured with a
role of administra-
tor
, del admin -all
will not delete it.
You can delete a specified administrator account (except for
the three preconfigured accounts and (if different) the only
remaining account with a
role of administrator). You can
also delete
all manually added administrative accounts with
the
del command:
# del admin -name <username> |-all
You must be logged on to an administrator -level account to
create, update and delete administrative accounts (refer to
Section 2.2).
2.2.4 Changing Administrative Passwords
You can change any password from an administrator-level
account, including your own:
# update admin -name <Username> -oldpassword <oldPassword> -password <newPassword>
-passwordconfirm <newPassword>
Provided the password is not locked (refer to Section 2.2.3),
administrators with
maintenance- or logviewer-level
accounts can change their own passwords using the same
command options.