Password Expiration

[kaha365]

Hello,

Is there a possibility to get the password expiration age for admin user in Ontap 9 ? 

Thank you in advance.

[RossC]

Hi @kaha365 

It's possible to get this information via the ONTAP CLI. For example, https://docs.netapp.com/us-en/ontap-cli-9121/security-login-role-config-show.html 

Hope this helps! 

[kaha365]

Thanks RossC,

However I wanted to know if there is a way to get  this for the remaining age days before expiration.

[RossC · Accepted solution]

Hi @kaha365 

Apologies for misunderstanding your original ask. 

I had a dig around our API and Docs and don't see anything that will give you what you want.

The only other thing I could think of is if you could parse/trawl some of the ONTAP logs to see when a user was created, and then (based on the default/defined expiry time) work out the password age for that particular user.

You could also consider dropping a ticket to our support team, they might know something I don't 🙂 

[kbw]

---

@kaha365 wrote:

Hello,

Is there a possibility to get the password expiration age for admin user in Ontap 9 ? 

Thank you in advance.

---

Hello kaha365,

If you are still looking for a solution check this:
Set expiry-time and then set expiry-warn-time minus 1 day

This way each time you login you will know how many days have left

login as: admin
Keyboard-interactive authentication prompts from server:
| Password:
End of keyboard-interactive prompts from server

Last login time: 5/10/2024 17:56:23
Warning: Your password will expire in 27 days. Use the "security login password" command to change your password.

netapp001::> security login role config show -fields passwd-expiry-time,passwd-expiry-warn-time -role admin
vserver role passwd-expiry-time passwd-expiry-warn-time
--------- ----- ------------------ -----------------------
netapp001 admin 30 29

netapp001::>

BR,

kbw