HP 5920 Series Configuration Manual page 30

User group—Each local user belongs to a local user group and has all attributes of the group, such
•
as the password control attributes and authorization attributes. For more information about local
user group, see
Binding attributes—Binding attributes control the scope of users, and are checked during local
•
authentication of a user. If the attributes of a user do not match the binding attributes configured for
the local user account, the user cannot pass authentication. Binding attributes include the IP address,
access port, MAC address, and native VLAN. For support and usage information about binding
attributes, see
Authorization attributes—Authorization attributes indicate the user's rights after it passes local
•
authentication. Authorization attributes include the ACL, user role, VLAN, and FTP/SFTP/SCP
working directory. For support information about authorization attributes, see
user attributes."
Configure the authorization attributes based on the service type of local users.
You can configure an authorization attribute in user group view or local user view to make the
attribute effective on all local users in the group or on only the local user. The setting of an
authorization attribute in local user view takes precedence over the attribute setting in user group
view.
Password control attributes—Password control attributes help control password security for device
•
management users. Password control attributes include password aging time, minimum password
length, password composition checking, password complexity checking, and login attempt limit.
You can configure a password control attribute in system view, user group view, or local user view,
making the attribute effective on all local users, local users in a group, or only the local user. A
password control attribute with a smaller effective range has a higher priority. For more
information about password management and global password configuration, see
password
Local user configuration task list
Tasks at a glance
(Required.)
(Optional.)
(Optional.)
Configuring local user attributes
When you configure local user attributes, follow these guidelines:
When you use the password-control enable command to globally enable the password control
•
feature, local user passwords are not displayed.
You can configure authorization attributes and password control attributes in local user view or user
•
group view. The setting in local user view takes precedence over the setting in user group view.
Configure authorization attributes according to the application environments and purposes.
•
Support for authorization attributes depends on the service types of users.
For LAN and portal users, only the acl and vlan authorization attributes are effective.
For HTTP, HTTPS, Telnet, and terminal users, only the user-role authorization attribute is
effective.
For SSH and FTP users, only the user-role and work-directory authorization attributes are
effective.
"Configuring user group
"Configuring local user
control."
Configuring local user attributes
Configuring user group attributes
Displaying and maintaining local users and local user groups
attributes."
attributes."
19
"Configuring local
"Configuring