Digi IX10, Руководство пользователя

Страница: 603 / 874

User authentication Local users
IX10 User Guide 603
4. Save the configuration and apply the change:
(config)> save
Configuration saved.
>
5. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu . Type quit to disconnect from the device.
Configure a local user
Required configuration items
n
A username.
n
A password. The password must be at least eight characters long and must contain at least
one uppercase letter, one lowercase letter, one number, and one special character. For
security reasons, passwords are stored in hash form. There is no way to get or display
passwords in clear-text form, although prior to saving the configuration, the password can be
shown by clicking
Reveal .
n
The authentication group or groups from which the user will inherit access rights. See
Authentication groups for information about configuring groups.
Additional configuration items
n
An alias for the user. Because the username cannot contain any special characters, such as
hyphens (-) or periods (.), an alias allows the user to log in using a name that contains special
characters.
n
The number of unsuccessful login attempts before the user is locked out of the system.
n
The amount of time that the user is locked out of the system after the specified number of
unsuccessful login attempts.
n
An optional public ssh key, to authenticate the user when using passwordless SSH login.
n
Two-factor authentication information for user login over SSH, telnet, and the serial console:
l
The verification type for two-factor authentication: Either time-based or counter-based.
l
The security key.
l
Whether to allow passcode reuse (time based verification only).
l
The passcode refresh interval (time based verification only).
l
The valid code window size.
l
The login limit.
l
The login limit period.
l
One-time use eight-digit emergency scratch codes.
To configure a local user:

Web