HP A6600 Configuration Manual page 29

Authorization attributes
Authorization attributes indicate the rights that a user has after passing local authentication.
Authorization attributes include the ACL, PPP callback number, idle cut function, user level, user role,
user profile, VLAN, and FTP/SFTP work directory. For more information, see
attributes."
Every configurable authorization attribute has its definite application environments and purposes. When
configuring authorization attributes for a local user, consider which attributes are needed and which are
not. For example, for PPP users, you do not need to configure the work directory attribute.
Configure an authorization attribute in user group view or local user view, making the attribute effective
for all local users in the group or for only the local user. The setting of an authorization attribute in local
user view takes precedence over that in user group view.
Local user configuration task list
Task
Configuring local user attributes
Configuring user group attributes
Displaying and maintaining local users and local user groups
Configuring local user attributes
To do...
1. Enter system view.
2. Set the password display
mode for all local users.
3. Add a local user and enter
local user view.
4. Configure a password for the
local user.
5. Specify the service types for
the local user.
Command...
system-view
local-user password-
display-mode { auto |
cipher-force }
local-user user-name
password { cipher |
simple } password
service-type { dvpn |
ftp | lan-access | { ssh
| telnet | terminal } *
| portal | ppp | web }
17
"Configuring local user
Remarks
Required
Optional
Optional
Remarks
—
Optional.
auto by default, indicating to display the
password of a local user in the way defined
by password.
Required.
No local user exists by default.
Optional.
If you do not configure any password for a
local user, the local user does not need to
provide any password during authentication
and can pass authentication after entering
the correct local user name and passing
attribute checks. To achieve higher security,
configure a password for each local user.
Required.
By default, no service is authorized to a local
user.
The web keyword is available only on
centralized routers.
The lan-access keyword is supported only on
routers with SAP modules.