Modify Local policy

Use this page to modify the Local policy settings for the IBM® TS7700 Grid. From this page, you can add, modify, or delete the account settings enforced by the Local policy.

To modify Local policy account settings:

From the Security Settings page, navigate to the Authentication Policies table.
Select the radio button next to the Local policy.
Select Modify... from the Select Action drop-down menu.
Click Go to open the Modify Local Accounts page.

Modify values for any of the following fields:

Account Expiration

Whether accounts defined by a policy can expire. Check this box to enable account expiration; clear this box to disable account expiration. If the box is checked, a value must be entered for the following field:

Password expires after (days): The number of days a password used by a policy account can be used before it expires. Possible values are 1 through 999. When an account password is reset from the Local Accounts table, this value determines the length of time the new password is valid.

Account Lock

Whether accounts defined by a policy can be locked after a number of successive incorrect password attempts. Check this box to enable locks on accounts; clear this box to disable locks on accounts. If the box is checked, a value must be entered for the following field:

Maximum number of successive incorrect password attempts: The number of successive times a login attempt can fail before a user is locked out. Possible values are 1 through 9. If an account is locked, it must be reset from the Local Accounts table.

To complete an Account Expiration or Account Lock operation click OK. To abandon the operation and return to the Security Settings page, click Cancel.

Note: You can backup these settings as part of the ts7700_cluster<cluster ID>.xmi file and restore them for later use or use with another cluster. When the backup settings are restored, new settings are added and existing settings are modified, but no settings are deleted.

Important: A restore operation following a backup of cluster settings does NOT restore or otherwise modify any user, role, or password settings defined by a security policy.

To add, modify, or delete individual account settings enforced by the Local policy, use the options provided by the Local Accounts table and described on the Add Local Account, Modify Local Account, or Confirm Delete Local Account page.