topic User lock duration. in Operating System - HP-UX

User lock duration.

Roy Colica — Wed, 06 Aug 2008 08:15:16 GMT

Once an account is locked, is it possible to customize a duration for which it is locked? Can this duration be configurable? Is it possible to have an automatic unlock?
We're workning on both PA-RISC 11.11 and IPF 11.23.
Thanks

Re: User lock duration.

Steven E. Protter — Wed, 06 Aug 2008 10:05:09 GMT

Shalom,

User must be manually unlocked.

You will need to script a solution to automatically unlock.

SEP

Re: User lock duration.

F Verschuren — Wed, 06 Aug 2008 10:17:08 GMT

I do not think this can be done automatic on hp using the comon security tooling
what you can do:
eiter config that all users are reactivated via the crontab.

#!/bin/sh
cat /etc/passwd |awk -F ":" '{ print $1}' |while read line
do
/usr/lbin/modprpw -k $line
done

ore you can use:
/usr/lbin/getprpw -m lockout $line
to build a better script that first checks if the user is locked and tan on the backgrount waits 29 minutes and that does the unlock, and run this script every 30 minutes in the crontab...

Re: User lock duration.

SKR_1 — Wed, 06 Aug 2008 11:30:38 GMT

It's not the good practice to unlock the accounts automatically. We should manually unlock the accounts.

Thanks

SKR