H3C S6812 Series Command Reference Manual page 1925

Parameters
idle-time: Specifies the maximum account idle time in days. The value range is 0 to 365. 0 means no
restriction for account idle time.
Usage guidelines
If a user account is idle for this period of time, the account becomes invalid and can no longer be
used to log in to the device.
Examples
# Set the maximum account idle time to 30 days.
<Sysname> system-view
[Sysname] password-control login idle-time 30
Related commands
display password-control
password-control login-attempt
Use password-control login-attempt to configure the login attempt limit. The settings include the
maximum number of consecutive login failures and the action to be taken when the maximum
number is reached.
Use undo password-control login-attempt to restore the default.
Syntax
password-control login-attempt login-times [ exceed { lock | lock-time time | unlock } ]
undo password-control login-attempt
Default
The global login-attempt settings:
•
The maximum number of consecutive login failures is 3.
•
The locking period is 1 minute.
The login-attempt settings for a user group equal the global settings.
The login-attempt settings for a local user equal those for the user group to which the local user
belongs.
Views
System view
User group view
Local user view
Predefined user roles
network-admin
Parameters
login-times: Specifies the maximum number of consecutive login failures. The value range is 2 to 10.
exceed: Specifies an action to be taken for the user who fails to log in after making the maximum
number of attempts.
•
lock: Disables the user account permanently.
•
lock-time time: Disables the user account for a period of time. The user can uses this user
account when the timer expires. The value range for the time argument is 1 to 360 minutes.
•
unlock: Allows the user account to continue using this account to perform login attempts.
13