# Changing confd passwords

**URL:** <https://dmap-community.ductus.global/t/changing-confd-passwords/1745>\
**Category:** Other Northbound Interfaces\
**Created:** [January 31, 2018, 7:15pm UTC](https://dmap-community.ductus.global/t/changing-confd-passwords/1745 "2018-01-31T19:15:36Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![tbmarconi](https://avatars.discourse-cdn.com/v4/letter/t/4da419/32.png) [@tbmarconi](https://dmap-community.ductus.global/u/tbmarconi)\
**Post date:** [January 31, 2018, 7:15pm UTC](https://dmap-community.ductus.global/t/changing-confd-passwords/1745/1 "2018-01-31T19:15:36Z")

</div>

According to the confd manual:

> Normally the AAA data will be stored as configuration in CDB. This allows for changes to be made  
> through ConfD’s transaction-based configuration management.

I am using the CLI started with 'confd\_cli -u admin -C"

I am confused as per which command(s) to use to update the password of the user ‘admin’ and of others too:

```
bmarconi-autovnfd-uas-1(config)#aaa authentication users user ?    
% No entries found
bmarconi-autovnfd-uas-1(config)#aaa authentication users user admin
-------------------------------------------------------------------^
syntax error: incomplete path
bmarconi-autovnfd-uas-1(config)#

```

What is the command ?

Thank you

Bruno

---

<div class="post-metadata">

**Author:** ![waitai](https://yyz2.discourse-cdn.com/flex010/user_avatar/dmap-community.ductus.global/waitai/32/436_2.png) [@waitai](https://dmap-community.ductus.global/u/waitai)\
**Post date:** [February 1, 2018, 9:35pm UTC](https://dmap-community.ductus.global/t/changing-confd-passwords/1745/2 "2018-02-01T21:35:28Z")

</div>

You need to invoke the tailf:action of change-password. Following is an example:

```
localhost(config)# aaa authentication users user admin change-password 
Possible completions:
  confirm-password Confirm New password
  new-password New password
  old-password Old password
```

---

<div class="post-metadata">

**Author:** ![cohult](https://yyz2.discourse-cdn.com/flex010/user_avatar/dmap-community.ductus.global/cohult/32/221_2.png) [@cohult](https://dmap-community.ductus.global/u/cohult)\
**Post date:** [February 1, 2018, 10:45pm UTC](https://dmap-community.ductus.global/t/changing-confd-passwords/1745/3 "2018-02-01T22:45:32Z")

</div>

An action is of course nice when CLI users change the password, however, in this case it seems like admin user is not authorized or similar to access the users authentication settings. Try for example the examples.confd/intro/1-2-3 example as a reference.

---

<div class="post-metadata">

**Author:** ![tbmarconi](https://avatars.discourse-cdn.com/v4/letter/t/4da419/32.png) [@tbmarconi](https://dmap-community.ductus.global/u/tbmarconi)\
**Post date:** [February 7, 2018, 8:19pm UTC](https://dmap-community.ductus.global/t/changing-confd-passwords/1745/4 "2018-02-07T20:19:10Z")

</div>

I understand my mistake… I was using a user without the adequate privilege. Switching to a user with the proper privilege allowed me to change the passwords.

```
deploy:/home/ubuntu# confd_cli -u security-admin -C
<snip>
deploy(config)#aaa authentication users user 
Possible completions:
  Login name of the user admin oper range security-admin
deploy(config)#aaa authentication users user oper ?
Possible completions:
  gid Group Identifier
  homedir Absolute path to user's home directory
  password     
  ssh_keydir Absolute path to directory where user's ssh keys may be found
  uid User Identifier
  <cr>         
deploy(config)#aaa authentication users user oper 
deploy(config-user-oper)#password
(<hash digest string>): ***
```