topic Account Lockout in Operating System - HP-UX

Account Lockout

rmueller58 — Tue, 30 Mar 2010 17:37:12 GMT

I need to perform maintenance on a couple databases and need to LOCKOUT accounts from accessing my system for a period of time until I get my db maintenance routines done.

I have this script to force password change..

while read UUNAME X
do
/usr/lbin/modprpw -e -m exptm=120 ${UUNAME}
done < /tmp/USERLIST.txt

I was curious if I could also or instead of the -m exptm=120 change it to alock=YES?

Any one had any experience it using modprpw for this again appreciate insight.. Just want to keep them out and NOT touching things, and only those people in USERLIST.txt

See read stdin above.

Re: Account Lockout

James R. Ferguson — Tue, 30 Mar 2010 18:56:31 GMT

Hi:

I'd use the '-m alock=YES' method. Using the '-m exptm=120' argument only sets the password expiration interval to 120-days. I base these remarks on reading the manpages, as I don't run "to-be-obsolete-after-11.31" Trusted systems.

Regards!

...JRF...

Re: Account Lockout

rmueller58 — Tue, 30 Mar 2010 18:57:38 GMT

Thanks again James..

Re: Account Lockout

rmueller58 — Tue, 30 Mar 2010 18:58:03 GMT

Thanks