HPE FlexNetwork 5510 HI Series Security Configuration Manual page 34

Step
10. (Optional.)
local user to a user group.
Configuring user group attributes
User groups simplify local user configuration and management. A user group contains a group of
local users and has a set of local user attributes. You can configure local user attributes for a user
group to implement centralized user attributes management for the local users in the group. Local
user attributes that are manageable include authorization attributes.
By default, every new local user belongs to the default user group system and has all attributes of
the group. To assign a local user to a different user group, use the group command in local user
view.
To configure user group attributes:
Step
1. Enter system view.
2. Create a user group and
enter user group view.
3. Configure
attributes
group.
4. (Optional.)
password control attributes
for the user group.
Command
•
Configure
composition
password-control
composition
type-number [ type-length
type-length ]
•
Configure
complexity checking policy:
password-control
complexity
{
user-name } check
•
Configure the maximum login
attempts and the action to
take if there is a login failure:
password-control
login-attempt
[ exceed { lock | lock-time
time | unlock } ]
Assign the
group group-name
Command
system-view
user-group group-name
authorization-attribute
authorization
acl-number | idle-cut minute |
for the user
user-profile profile-name | vlan
vlan-id
directory-name } *
•
Set the password aging time:
password-control
aging-time
•
Set the minimum password
length:
Configure
password-control
length
•
Configure
composition
password-control
composition
type-number
the password
policy:
type-number
the password
same-character |
login-times
{ acl
| work-directory
aging
length
the password
policy:
type-number
[ type-length
21
Remarks
feature.
By default, a local user belongs to
the default user group system.
Remarks
N/A
By default, there
system-defined user
named system, which is the
default user group.
By default, no authorization
attribute is configured for a user
group.
Optional.
By default, the user group uses
the global password control
settings. For more information,
see "Configuring
control."
is a
group
password