access log = mysyslog
authorization log = authorlog
accounting log = accesslog

# Sample scripts to enforce a password policy:
mavis module passwordpolicy = null {
	script in {
		if (defined $PASSWORD
		 && ($PASSWORD !~ /^........+$/	# minimum length
		  || $PASSWORD !~ /\d/		# digit
		  || $PASSWORD !~ /[a-z]+/	# lower case
		  || $PASSWORD !~ /[A-Z]+/	# upper case
		   )) {
				set $USER_RESPONSE = "Password is too weak."
				set $RESULT = "NAK"
				return
		}
		if (defined $PASSWDNEW
		 && ($PASSWDNEW !~ /^........+$/
		  || $PASSWDNEW !~ /\d/
		  || $PASSWDNEW !~ /[a-z]+/
		  || $PASSWDNEW !~ /[A-Z]+/
		   )) {
				set $USER_RESPONSE = "New password is too weak."
				set $RESULT = "NAK"
				return
		}
	}
}
    acl password-compliance {
            permit 
    }
    password acl = password-compliance

device ALL {
	address = ::/0

	device world {
		address = 0.0.0.0/0
		welcome banner = "Welcome\n"
		enable 15 = clear secret
		key = "linshikey"
	}
}


device JL-TEST-CR {
	address = 222.*.*.*
            enable 15 = clear secret
	key = "lingshikey"
            parent = world
	welcome banner = "Welcome home\n"
}	
profile JL {
	script {
		if (service == shell) {
		    if (device == JL-TEST-CR) {
			set priv-lvl = 2
			permit
		    }
		    permit
		}
	}
}

    group test {
            group JL
   }

user test {
	password login = clear Opengoss2025
	member = test
}