password change on mds 9513

[vt351j]

hi - we have a env. in the production wherein Fabric A as two MDS9513 swts and two in Fabric B.

so would like to change the password of 4 of these swts without impact the env.

pls assist the steps to change the password.

thanks.

[vt351j]

and moreover these swts are also running on Fabric/device  manager.

[dynamoxxx]

ssh/telnet password change is easy:

config t

username admin password

exit

but i believe you will also need to change snmp password for this account:

config t

snmp user admin auth md5

i would definitely test the SNMP part with a test account first.

[Michael Brown]

As of SAN OS 3.x, if you change either the SNMP server user, or the cli user password, it is synced to the other account.  IE: if you enter this on the command line 'user mike role network-admin password pinkfloyd' when user Mike logs in via FM/DM his password would be 'pinkfloyd'.   There is no need to change the snmp-server user password once it is changed for the command line user.

Like wise if you enter this on the command line 'snmp-server user mike auth md5 ledzep', when user mike logs in via telnet or ssh, his password would be 'ledzep'.

If managing via FM, the same user must have the same SNMP-server password is all the MDS in the fabric.  They should also have the same role in each MDS with the same permissions.

Hope this helps,

Mike

[dynamoxxx]

good stuff Mike, thank you for explanation. I remember i had to recover a lost admin password on 9513, when i changed password from the loader> prompt it would not allow me to login via Fabric manager until i also updated the SNMP account. I guess that's different when you are running in normal mode and not recover mode.

[vt351j]

more calrification...

NOTE:we have almost 12 fabrics configured on FM and out of them few fabric swt's are running 4.2[3] & 3.2[3a] release.

so as per your update if we chnage the passwd on each and every swt in the 12 fabrics swt will automaticlly reflect the new passwd to FM/DM?

[Michael Brown]

The only place I know where you can change the admin password for recovery is at the (boot) prompt when the kickstart image is booted.  Yes...that password change will not be reflected in the SNMP-user password.  Once the switch boots up with the main image, you would need to set the admin user password on the CLI, and what ever you set it to, should also be what the FM/DM admin user login is set to.

If all the MDS in the fabric are at 3.0 or later, and you change the command line password for a user on each switch, then yes once that is done the FM/DM user password should be in sync and the new password should work for FM/DM login.  Just remember that when FM/DM login occurs, it expects the user to have the same password and role on each switch in the fabric.

-Mike