Is possible to exclude a specific user from security

[Luciano S Machado]

Hi,

Is possible to exclude a specific user from /etc/default/security rules? Our SO is HP-UX 11.23 (pa-risc and IA64) and we have TrustedMigration installed.

THX for any help.
Luciano

[Ismail Azad]

Hi luciano,

/etc/default/security is a system wide default. Trusted Migration would mean SMSE is available and I know on 11.31 atleast /var/adm/userdb takes precedence over /etc/default/security.

The SMSE database configures "per user account" and hence it should override the system wide default and I would say "yes". Because if it doesn't, it doesn't make sense configuring "per user account" as I really think trusted migration is similar to the hardwired SMSE database on 11.31.

Regards
Ismail Azad

[Ismail Azad]

Hi,

If it helps ... hmm don't forget to assign points.

Regards
Ismail Azad

[Luciano S Machado]

Thanks Ismail,
Do I need to use userdbset for this? I'd like to exclude the attribute auth_failures from a specific user. I tried:
# userdbset -d -u user auth_failures

but it didn't work:
Access is denied by the AUTH_MAXTRIES option in security(4)

Rgds
Luciano