enable_strong_cli_password

This command changes the password requirement from 8 to 15 characters for the CLI user.

After you change the password with this command, the CLI user must change their password again on first login.

This API is available in Guardium V11.2 and later.

REST API syntax

This API is available as a REST service with the POST method. Call this API as follows:
POST https://[Guardium hostname or IP address]:8443/restAPI/strong_cli_password

GuardAPI syntax

enable_strong_cli_password parameter=value

Parameters

Parameter Value type Description
confirmpassword String Required. Confirm the new password.
enable Boolean Required. Valid values:
  • 0 (false): CLI password can be 8 characters.
  • 1 (true): CLI password must be 15 characters.
newpassword String Required. The new password for this user.
username String Required. The name of the user whose password you want to change. The name must be cli.
api_target_host String

Specifies the target hosts where the API executes. Valid values:
  • all_managed: execute on all managed units but not the central manager
  • all: execute on all managed units and the central manager
  • group:<group name>: execute on all managed units identified by <group name>
  • host name or IP address of a managed unit: specified from the central manager to execute on a managed unit.  For example, api_target_host=10.0.1.123.
  • host name or IP address of the central manager: specified from a managed unit to execute on the central manager. For example, api_target_host=10.0.1.123.

IP addresses must conform to the IP mode of your network. For dual IP mode, use the same IP protocol with which the managed unit is registered with the central manager. For example, if the registration uses IPv6, specify an IPv6 address. The hostname is independent of IP mode and can be used with any mode.

GuardAPI example

grdapi change_cli_password username=cli enable=1 newpassword="Strong!Pass1234!" confirmpassword="Strong!Pass1234!"