HP MSR2000 Configuration Manual page 30

Step
8. (Optional.) Configure
authorization attributes for
the local user.
9. (Optional.) Configure
password control attributes
for the local user.
10. (Optional.) Assign the
local user to a user group.
Configuring user group attributes
User groups simplify local user configuration and management. A user group comprises a group of local
users and has a set of local user attributes. You can configure local user attributes for a user group to
implement centralized user attributes management for the local users in the group. Local user attributes
that are manageable include authorization attributes.
By default, every new local user belongs to the default user group system and has all attributes of the
group. To assign a local user to a different user group, use the group command in local user view.
Command
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute |
user-role role-name | vlan vlan-id |
work-directory directory-name } *
•
Set the password aging time:
password-control aging
aging-time
•
Set the minimum password
length:
password-control length length
•
Configure the password
composition policy:
password-control composition
type-number type-number
[ type-length type-length ]
•
Configure the password
complexity checking policy:
password-control complexity
{ same-character | user-name }
check
•
Configure the maximum login
attempts and the action to take if
there is a login failure:
password-control login-attempt
login-times [ exceed { lock |
lock-time time | unlock } ]
group group-name
19
Remarks
By default, a local user is assigned
the user role of network-operator
when the user is created by a
network-admin user.
For PPP users, only the settings for acl,
callback-number, and idle-cut take
effect.
For LAN and portal users, only the
settings for acl, idle-cut, and vlan
take effect.
For Telnet and terminal users, only
the setting for user-role takes effect.
For SSH and FTP users, only the
settings for user-role and
work-directory take effect.
For other types of local users, no
authorization attribute takes effect.
Optional.
By default, the local user uses
password control attributes of the
user group to which the local user
belongs.
The password control attributes take
effect only on device management
users.
By default, a local user belongs to the
default user group system.