beautypg.com

Setting user group password control parameters – H3C Technologies H3C SecPath F1000-E User Manual

Page 262

background image

252

Step Command

Remarks

8.

Specify the maximum number
of login attempts and the

action to be taken when a

user fails to log in after the
specified number of attempts.

password-control login-attempt
login-times [ exceed { lock | unlock

| lock-time time | unlock } ]

Optional.
By default, the maximum number

of login attempts is 3 and a user
failing to log in after the specified

number of attempts must wait for

one minute before trying again.

9.

Set the number of days during
which the user is warned of

the pending password

expiration.

password-control
alert-before-expire alert-time

Optional.
7 days by default.

10.

Set the maximum number of
days and maximum number

of times that a user can log in
after the password expires.

password-control

expired-user-login delay delay
times times

Optional.
By default, a user can log in three

times within 30 days after the
password expires.

11.

Set the authentication timeout
time.

password-control
authentication-timeout

authentication-timeout

Optional.
60 seconds by default.

12.

Set the maximum account idle
time.

password-control login idle-time
idle-time

Optional.
90 days by default.

CAUTION:

The specified action to be taken after a user fails to log in for the specified number of attempts takes effect
immediately, and can thus affect the users already in the blacklist. Other password control configurations

take effect only for users logging in later and passwords configured later.

Setting user group password control parameters

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Create a user group and enter
user group view.

user-group group-name

N/A

3.

Configure the password
aging time for the user group. password-control aging aging-time

Optional.
By default, the password aging
time configured in system view is

used.

4.

Configure the minimum

password length for the user
group.

password-control length length

Optional.
By default, the minimum password

length configured in system view is
used.
A password must contain at least
eight characters.