{"type":"api","title":"Update local password policy","meta":{"id":"/apps/pubhub/media/crosswork-network-controller-7-1/f445c17e25a1120e8fbde4bd413083d0fd88b2b3/c92e7384-b2f4-3d3b-8e8e-03a9325b07bb","info":{"title":"Crosswork RBAC API - Version 1","contact":{"name":"Crosswork Team, Cisco","email":"support@cisco.com"},"description":"Crosswork Role-based Access Control APIs","license":{"name":"Cisco Software License Agreement","url":"http://www.cisco.com/public/sw-license-agreement.html"},"version":"1.0.0"},"security":[{"bearerAuth":[]}],"x-parser-conf":{"overview":{"markdownPath":"reference/INFRA/RBAC/rbac-v1-overview.md"}},"swagger":"2.0","basePath":"/crosswork/aaa/v1","schemes":["https"],"securityDefinitions":{"bearerAuth":{"type":"apiKey","name":"Authorization","in":"header","description":"Use a bearer token to authenticate requests. Include the token in the Authorization header with the prefix 'Bearer '."}}},"spec":{"summary":"Update local password policy.","description":"This API allows updates to the local password policies like password length, reuse of password, password expiration days, prevent reuse, etc.","operationId":"UpdatePasswordPolicy","responses":{"204":{"description":"No Content. The request was successful and there is no additional content in the response body.","schema":{"type":"object","properties":{"rbacEmpty":{"type":"object"}},"$$ref":"#/definitions/rbacEmpty"}},"403":{"description":"Forbidden. The server recognizes the authentication credentials, but the client is not authorized to perform this request."},"422":{"description":"Unprocessable Entity. The server understands the content type of the request entity, and the syntax of the request entity is correct, but it was unable to process the contained instructions."},"500":{"description":"Internal Server Error. The server could not fulfill the request."}},"parameters":[{"name":"body","description":"Updated specification of the password policy","in":"body","required":true,"schema":{"type":"object","required":["MinPasswordLength","ChangePasswdOnFirstLogin"],"properties":{"MinPasswordLength":{"description":"Password must contain at least 8 characters (valid range 8-80)","type":"number"},"NoUsername":{"description":"Password cannot contain user name or reverse of user name","type":"boolean"},"NoCiscoVariant":{"description":"Password cannot contain 'cisco' or 'ocsic' or any capitalized letter variant thereinby substituing '1','|',or '!' for i, or '0' for 'o' or '$' for 's'","type":"boolean"},"NoCharRepetition":{"description":"No character can be repeated more than three times consecutively","type":"boolean"},"NumChangedCharsEnable":{"description":"Boolean flag to indicate wheather NumChangedChars should be update or not","type":"boolean"},"NumChangedChars":{"description":"Must change at least 1 character(s) when creating a new password (valid range 1-80)","type":"number"},"NumReuseLimitEnable":{"description":"Boolean flag to indicate wheather NumReuseLimit should be update or not","type":"boolean"},"NumReuseLimit":{"description":"Cannot reuse the last 5 passwords (valid range 3-24)","type":"number"},"PasswordReuseDaysEnable":{"description":"Boolean flag to indicate wheather PasswordReuseDays should be update or not","type":"boolean"},"PasswordReuseDays":{"description":"Cannot reuse password used in the last 15 days (valid range 1-365) ","type":"number"},"FailedLoginsBefLoEnable":{"description":"Boolean flag to indicate wheather FailedLoginsBeforeLockout should be update or not","type":"boolean"},"FailedLoginsBeforeLockout":{"description":"Lock user out after 5 unsuccessful login attempts (valid range 1-10)","type":"number"},"LockOutUserTimeEnable":{"description":"Boolean flag to indicate wheather LockOutUserTime should be update or not","type":"boolean"},"LockOutUserTime":{"description":"Lock user out for 6 minutes (valid range 1-900)","type":"number"},"PasswordExpiryDaysEnable":{"description":"Boolean flag to indicate wheather PasswordExpiryDays should be update or not","type":"boolean"},"PasswordExpiryDays":{"description":"Cannot reuse password used in the last 15 days (valid range 1-365) ","type":"number"},"DaysForWarningEnable":{"description":"Boolean flag to indicate wheather DaysForWarning should be update or not","type":"boolean"},"DaysForWarning":{"description":"Warn 15 days before password expiry (valid range 7-60)","type":"number"},"ChangePasswdOnFirstLogin":{"description":"Change password on first login","type":"boolean"}},"example":{"MinPasswordLength":8,"NoUsername":true,"NoCiscoVariant":true,"NoCharRepetition":true,"NumChangedCharsEnable":true,"NumChangedChars":1,"NumReuseLimitEnable":true,"NumReuseLimit":5,"PasswordReuseDaysEnable":true,"PasswordReuseDays":15,"FailedLoginsBefLoEnable":true,"FailedLoginsBeforeLockout":5,"LockOutUserTimeEnable":true,"LockOutUserTime":6,"PasswordExpiryDaysEnable":true,"PasswordExpiryDays":60,"DaysForWarningEnable":true,"DaysForWarning":15,"ChangePasswdOnFirstLogin":true},"title":"PasswordPolicyConfig request","$$ref":"#/definitions/rbacPasswordPolicyConfig"}}],"tags":["rbac"],"__originalOperationId":"UpdatePasswordPolicy","consumes":["application/json"],"produces":["application/json"],"security":[{"bearerAuth":[]}],"method":"put","path":"/passwordPolicyConfig"}}