Setting Global Password Control Parameters; Setting User Group Password Control Parameters - HP 5920 Series Configuration Manual

Setting global password control parameters

The settings in system view have global significance and apply to all device management users. The
password expiration time, minimum password length, and password composition policy can be
configured in system view, user group view, or local user view. The password settings with a smaller
application scope have a higher priority.
The password-control login-attempt command takes effect immediately and can affect the users already
in the password control blacklist. Other password control configurations do not take effect on users that
have been logged in or passwords that have been configured.
To set global password control parameters:
Step
1. Enter system view.
2. Set the password expiration
time.
3. Set the minimum password
update interval.
4. Set the minimum password
length.
5. Configure the password
composition policy.
6. Configure the password
complexity checking policy.
7. Set the maximum number of
history password records for
each user.
8. Specify the maximum number
of login attempts and the
action to be taken when a
user fails to log in after the
specified number of attempts.
9. Set the number of days during
which a user is notified of the
pending password expiration.
10. Set the maximum number of
days and maximum number
of times that a user can log in
after the password expires.
11. Set the maximum account idle
time.

Setting user group password control parameters

Step
1. Enter system view.
Command
system-view
password-control aging aging-time
password-control update interval
interval
password-control length length
password-control composition
type-number policy-type
[ type-length type-length ]
password-control complexity
{ same-character | user-name }
check
password-control history
max-record-num
password-control login-attempt
login-times [ exceed { lock |
lock-time time | unlock } ]
password-control
alert-before-expire alert-time
password-control
expired-user-login delay delay
times times
password-control login idle-time
idle-time
Command
system-view
104
Remarks
N/A
The default setting is 90 days.
The default setting is 24 hours.
The default setting is 10
characters.
By default, a password is valid if it
has one valid character and does
not have any invalid characters.
By default, the system does not
perform password complexity
checking.
The default setting is 4.
By default, the maximum number
of login attempts is 3 and a user
failing to log in after the specified
number of attempts must wait for 1
minute before trying again.
The default setting is 7 days.
By default, a user can log in three
times within 30 days after the
password expires.
The default setting is 90 days.
Remarks
N/A