HP MSR Series Configuration Manual page 38

Step
8. (Optional.) Configure
authorization
attributes for the local
user.
9. (Optional.) Configure
password control
attributes for the local
user.
10. (Optional.) Assign the
local user to a user
group.
Configuring user group attributes
User groups simplify local user configuration and management. A user group contains a group of
local users and has a set of local user attributes. You can configure local user attributes for a user
group to implement centralized user attributes management for the local users in the group. Local
user attributes that are manageable include authorization attributes.
By default, every new local user belongs to the default user group system and has all attributes of
the group. To assign a local user to a different user group, use the group command in local user
view.
To configure user group attributes:
Command
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute |
ip ipv4-address | ipv6
ipv6-address | ipv6-pool
ipv6-pool-name | ipv6-prefix
ipv6-prefix prefix-length |
{ primary-dns | secondary-dns }
{ ip ipv4-address | ipv6
ipv6-address } |
sslvpn-policy-group group-name
| url url-string | user-profile
profile-name | user-role role-name
| vlan vlan-id | vpn-instance
vpn-instance-name |
work-directory directory-name } *
•
Set the password aging time:
password-control aging
aging-time
•
Set the minimum password
length:
password-control length
length
•
Configure the password
composition policy:
password-control
composition type-number
type-number [ type-length
type-length ]
•
Configure the password
complexity checking policy:
password-control
complexity
{ same-character |
user-name } check
•
Configure the maximum login
attempts and the action to
take if there is a login failure:
password-control
login-attempt login-times
[ exceed { lock | lock-time
time | unlock } ]
group group-name
23
Remarks
The following default settings apply:
•
FTP, SFTP, and SCP users have
the root directory of the NAS set as
the working directory. However, the
users do not have permission to
access the root directory.
•
The network-operator user role is
assigned to local users that are
created by a network-admin or
level-15 user.
By default, the local user uses password
control attributes of the user group to
which the local user belongs.
Only device management users support
the password control feature.
By default, a local user belongs to the
default user group system.