accseccfg command errors

This topic lists error messages for the accseccfg command.

See Common errors for a list of error messages that apply to all commands. See accseccfg command for information about command syntax and examples of command use.

Table 1. accseccfg command errors.

The error table is a multi-row, two-column table where each row describes a CMM CLI command error: column one lists the error reported by the command-line interface and column two describes what the error means.

Error message Definition
-dc can not be enabled when -rc or/and -cp is/are disabled or being disabled. A user tries to set a minimum number of different password characters that conflicts with password reuse cycle (-rc) and complex password (-cp) settings.
-dc is being disabled as -cp or/and -rc is/are disabled or being disabled. A user tries to disable the minimum number of different password characters when it conflicts with password reuse cycle (-rc) and complex password (-cp) settings.
-dc is being set to 2 as -cp or/and -rc is/are enabled or being enabled A user tries to set a minimum number of different password characters value that conflicts with password reuse cycle (-rc) and complex password (-cp) settings.
CMM security policy disallows -cp disable right now. A user attempts to disable the complex password (-cp) when the current security level setting does not allow it.
CMM security policy disallows -de disable right now. A user attempts to disable mandatory USERID password change at first login (-de) when the current security level setting does not allow it.
CMM security policy disallows -pc disable right now. A user attempts to disable mandatory password change at first login (-pc) when the current security level setting does not allow it.
CMM security policy disallows high level right now. A user attempts to set the security level to high when the current security level setting does not allow it.
CMM security policy disallows legacy level right now. A user attempts to set the security level to legacy when the current security level setting does not allow it.
Getting policy state failed An error occurs while the CMM is getting the security policy state.
Reading account security level failed. An error occurs while the CMM is reading the account security level.
Setting account defaults to high level failed. An error occurs while the CMM is setting the account security level to -high.
Setting account defaults to legacy level failed. An error occurs while the CMM is setting the account security level to -legacy.
The -high option cannot be used with other options. A user tries to set the account security to high settings while changing individual option values.
The -legacy option cannot be used with other options. A user tries to set the account security to legacy settings while changing individual option values.
The account inactivity disable time period must be greater than the account inactivity alert time period. A user tries to set the account inactivity disable time period to be less than the account inactivity alert time period.
The minimum password change interval must be less than the password expiration period (number days or number hours).

where number identifies the minimum password change interval

A user tries to set the -pc option to a value greater than the -pe option.
The password expiration period (number days or number hours) must be greater than the minimum password change interval.

where number identifies the password expiration period

A user tries to set the -pe option to a value less than the -pc option.