User Guide

54.....Avocent® ACS 6000 Advanced Console Server
• Min Days: Enter the minimum number of days allowed between password changes.
Password changes attempted sooner will be rejected. If not specified, -1 is the default
which disables the restriction.
• Max Days: Enter the maximum number of days a password is valid. After this period, a
password change will be forced. If not specified, -1 is the default which disables the
restriction.
• Warning Days: Enter the number of days that a warning is issued to the user prior to
expiration. Entering 0 will cause the warning to be issued on the expiration day. A
negative value or no value means that no warning will be issued.
7. Enter the desired Account Expiration date (YYYY-MM-DD).
8. Click Save.
To configure password rules:
1. Click Users - Local Accounts - Password Rules.
2. If password complexity is desired (recommended), make sure Check Password Complexity is
selected.
3. If password complexity is enabled, enter the desired values for password complexity.
4. Enter the desired values for Default Expiration.
5. Click Save.
User groups
User groups are given access and authorizations either by default or as assigned by an
administrator. Administrators can alter the permissions and access rights of users belonging to the
appliance-admin or user groups or create additional groups with custom permissions and access
rights. Administrators can add, delete or modify permissions and access rights for users from any
group at any time.
If an administrator configures the console server to restrict user access to ports, the administrator
can assign users to groups that are authorized for port access. The administrator can also
authorize groups for power management and data buffer management.
This document and the software refer to users whose accounts are configured on remote
authentication servers as remote users. Remote users do not need local accounts.
Radius, TACACS+ and LDAP authentication services allow group configuration. If a remote user is
configured as a member of a remote group, the authentication server provides the group name to
the console server when it authenticates the user. A local group by the same name must also be
configured on the console server. If an authentication server authenticates a remote user but does
not return a group, then the remote user is, by default, assigned to the user group.