topic Re: security issues / configuration in Operating System - HP-UX

security issues / configuration

Paul Torp — Mon, 20 Aug 2007 08:23:19 GMT

hi.

i wonder how i can lock a useraccount after a certain amount of failed logins in a UNTRUSTED system.. like /usr/lbin/modprpw -m umaxlntr=6 "$logname" is in trusted.

i also wonder what the string in /etc/default/security should be to make it global in a TRUSTED system..

anyone?

regards
pål

Re: security issues / configuration

Patrick Wallek — Mon, 20 Aug 2007 08:45:04 GMT

Not possible in an untrusted environment.

In a trusted environment, this is controlled by security policies, which can be seen via the getprpw command ('man getprpw' for more info). This is NOT configurable in the /etc/default/security file.

You should do a 'man security' for information on the security file.

Re: security issues / configuration

Steven E. Protter — Mon, 20 Aug 2007 08:58:39 GMT

Shalom,

On a non-trusted system you would need to look at this output.
lastb -R

You can run a cron script that checks this output user by user. At this point when you find three bad logins you can issue a passwd -l username command.

There is a script posted in the sysadmin scripts thread that does exactly this.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=51050

SEP

Re: security issues / configuration

Paul Torp — Tue, 21 Aug 2007 03:28:14 GMT

hi..

i have tried looking for that script in section 2 and 3.. (of favorite scripts) but cant really find it..

i am running out of time and got deadline tomorrow to come up with something to solve the issue..

pal

Re: security issues / configuration

Paul Torp — Tue, 21 Aug 2007 03:35:14 GMT

the sad sad thing is that i have no hpux boxes to test on atm.. (not even a production).. makes things a bit harder...

Re: security issues / configuration

Paul Torp — Tue, 21 Aug 2007 04:20:20 GMT

found it SEP..

tnx