HPE Community
Operating System - HP-UX
1752579 Members
3873 Online
108788 Solutions
New Discussion

Who Me Too'd this topic

Mike755
Advisor

‎03-07-2014 08:48 AM - edited ‎03-07-2014 09:11 AM

‎03-07-2014 08:48 AM - edited ‎03-07-2014 09:11 AM

Stop Root account being disabled by failed direct login attempts?

HPUX 11.31 looking for ways to stop the root account (direct login not allowed) from being disabled when attempts to login  (example would be a security trace scan) are done.   Looking for options on how to prevent it being disable but yet still keep unauthorized users/processes from accessing the root account.

 

With Linux I know you can use "denyhosts" set with something like 2 attempts until ip-ban.  We have Ipfilter and HIDS so maybe something in there or a combination of other tools would work on HPUX similar to this?

 

i.e..  See the attempt to login directly as root, deny them after 2 attempts and report it to us that it occurred?

 

Any ideas, thoughts or direction would be awesome.   Kind of a cool project hoping one of you expert level folks might already be doing something like this on the HPUX 11.31 servers.

Thanks, Mike

Legalize Freedom
1 person had this problem.
0 Kudos
Reply
Who Me Too'd this topic
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.