HP 5120 SI Series Security Configuration Manual page 29

Authorization attributes
•
Authorization attributes indicate the rights that a user has after passing local authentication.
Authorization attributes include the ACL, idle cut function, user level, user role, user profile, VLAN,
and FTP/SFTP work directory. For more information about authorization attributes, see
"Configuring local user
You can configure an authorization attribute in user group view or local user view, making the
attribute effective for all local users in the group or for only the local user. The setting of an
authorization attribute in local user view takes precedence over that in user group view.
Local user configuration task list
Task
Configuring local user attributes
Configuring user group attributes
Displaying and maintaining local users and local user groups
Configuring local user attributes
Follow these steps to configure attributes for a local user:
To do...
Enter system view
Add a local user and enter local user
view
Configure a password for the local
user
Place the local user to the state of
active or blocked
Set the maximum number of users
using the local user account
Configure the
password control
attributes for the
local user
attributes."
Use the command...
system-view
local-user user-name
In non-FIPS mode:
password [ [ hash ] { cipher |
simple } password ]
In FIPS mode:
password
state { active | block }
access-limit max-user-number
Set the
password-control aging
password aging
aging-time
time
Remarks
Required
Optional
Optional
17
Remarks
—
Required
No local user exists by default.
Optional
Optional
When created, a local user is in
the active state by default, and the
user can request network
services.
Optional
By default, there is no limit on the
maximum number of users that
use the same local user account.
This limit is not effective for FTP
users.
Optional
By default, the setting for the user
group is used. If there is no such
setting for the user group, the
global setting is used.