HP 10500 Series Configuration Manual page 27

Security configuration guide
Hide thumbs Also See for 10500 Series:
Table of Contents

Advertisement

Every configurable authorization attribute has its definite application environments and purposes.
When you configure authorization attributes for a local user, consider which attributes are needed
and which are not.
You can configure an authorization attribute in user group view or local user view to make the
attribute effective for all local users in the group or only for the local user. The setting of an
authorization attribute in local user view takes precedence over that in user group view.
Local user configuration task list
Task
Configuring local user attributes
Configuring user group attributes
Displaying and maintaining local users and local user groups
Configuring local user attributes
Follow these guidelines when you configure local user attributes:
When the password control feature is enabled globally by using the password-control enable
command, local user passwords are not displayed.
If the user interface authentication mode (set by the authentication-mode command in user
interface view) is AAA (scheme), the commands that a login user can use after login depend on the
privilege level authorized to the user. If the user interface authentication mode is password
(password) or no authentication (none), the commands that a login user can use after login depend
on the level configured for the user interface (by using the user privilege level command in user
interface view). For an SSH user using public key authentication, available commands depend on
the level configured for the user interface. For more information about user interface authentication
mode and user interface command level, see Fundamentals Configuration Guide.
You can configure the user profile authorization attribute in local user view, user group view, and ISP
domain view. The setting in local user view has the highest priority, and that in ISP domain view has
the lowest priority. For more information about user profiles, see
To configure the attributes of a local user:
Step
1.
Enter system view.
2.
Add a local user and enter
local user view.
Command
system-view
local-user user-name
17
Remarks
Required.
Optional.
Optional.
"Configuring a user
Remarks
N/A
By default, no local user exists.
profile."

Advertisement

Table of Contents
loading

Table of Contents