topic Re: a problrm about trust system in Operating System - HP-UX

a problrm about trust system

lin.chen — Wed, 08 Nov 2006 04:47:01 GMT

my system is a trust system,there are 100 user account in my system!
now I need to change the security policy for all users(the same policy) as following.
1. Start SAM
2. Select 'Accounts for Users and Groups'
3. Select 'Users'
4. Select the user account you wish to modify
5. From the 'Actions' menu, select 'Modify Security Policies'
6. Select 'General User Account Policies'
7. Change to the desired number of login attempts allowed from
'Unsuccessful Login Tries Allowed'
-->You will have to select 'Custom' and then specify the number
of attempts that you wish to give that user account.

but it is terrible because i need do it for 100 times.
could you tell to how to change security policy for users in a simple way.
Many thanks!!!

Re: a problrm about trust system

Steven E. Protter — Wed, 08 Nov 2006 04:52:52 GMT

Shalom

Same sam, nearby menu lets you set default security policy for the system. This will modify the behavior of all accounts.

SEP

Re: a problrm about trust system

Steven E. Protter — Wed, 08 Nov 2006 04:54:57 GMT

Shalom

Same sam, nearby menu lets you set default security policy for the system. This will modify the behavior of all accounts.

You will need to write a custom script that activates all user accounts as well.

http://docs.hp.com/en/B2355-90672/B2355-90672.pdf

To lock:
/usr/lbin/modprpw -m exptm=0 username
To unlock:
/usr/lbin/modprpw -k userid

SEP

Re: a problrm about trust system

RAC_1 — Wed, 08 Nov 2006 04:55:48 GMT

There are commands. man getprpw, modprpw, getprdef and modprdef.

You will have to do
modprpw -m umaxlntr=10 "user_name"

So you can do as follows.

logins -u | awk '{print $1}'|while read user
do
modprpw -m umaxlntr=10 ${user}
done

check with getprpw
getprpw -m umaxlntr user_name