HP FlexFabric 5930 Series Security Configuration Manual page 25

Step
7. (Optional.) Configure
authorization attributes for
the local user.
8. (Optional.) Configure
password control attributes
for the local user.
9. (Optional.) Assign the
local user to a user group.
Configuring user group attributes
User groups simplify local user configuration and management. A user group comprises a group of local
users and has a set of local user attributes. You can configure local user attributes for a user group to
Command
authorization-attribute { acl
acl-number | idle-cut minute |
user-role role-name | vlan vlan-id |
work-directory directory-name } *
•
Set the password aging time:
password-control aging
aging-time
•
Set the minimum password
length:
password-control length length
•
Configure the password
composition policy:
password-control composition
type-number type-number
[ type-length type-length ]
•
Configure the password
complexity checking policy:
password-control complexity
{ same-character | user-name }
check
•
Configure the maximum login
attempts and the action to take if
there is a login failure:
password-control login-attempt
login-times [ exceed { lock |
lock-time time | unlock } ]
group group-name
18
Remarks
The following default settings apply:
•
No authorization ACL, idle
timeout period, or authorized
VLAN is configured for local
users.
•
FTP, SFTP, or SCP users are
authorized access to the root
directory of the device, but they
do not have the access
permission.
•
The network-operator user role is
assigned to local users that are
created by a network-admin or
level- 1 5 user.
For Telnet and terminal users, only
the setting for user-role takes effect.
For SSH and FTP users, only the
settings for user-role and
work-directory take effect.
For other types of local users, no
authorization attribute takes effect.
Optional.
By default, the local user uses
password control attributes of the
user group to which the local user
belongs.
Only device management users
support the password control
function.
By default, a local user belongs to the
default user group system.