HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Accounts locking prematurely - 11.31/trusted system

 
Kevin (Gonzo) Bushman
Frequent Advisor

Accounts locking prematurely - 11.31/trusted system

I've got two systems running 11.31/IA-64. Inactivity is set to 32 days. Yet I have on occasion users calling to have their accounts unlocked. When I unlock them, I find they were locked due to inactivity (and usually also too many login attempts, which makes sense), yet they were logged in just the day before. It happened to our DBA this morning, but I know for a fact he was logged in yesterday as we've been very busy migrating from a couple of old 11.11 systems to our new 11.31 systems.

This is happening on trusted systems with Sept/10 installed.

-Gonzo
If you do nothing else in with your life, make friends with a dog.
1 REPLY
mvpel
Trusted Contributor

Re: Accounts locking prematurely - 11.31/trusted system

Check to make sure that the TCB database for the user is being updated properly when they log in.

/tcb/files/auth/u/username contains all the TCB data, in particular, the u_suclog value indicating the last successful login. This is, as I recall, what's compared against the current date to determine account inactivity.

To get the date string for a UNIX time value:

perl -e 'print scalar localtime '

When your users log in to the system, is this value getting updated correctly?