Odd behavior with account on hp-ux 11.31

[Sean M.]

We have several hp-ux 11.31 boxes that have been setup with a webuser for pulling files and performance data. For some reason this account is getting locked out constantly (it uses ssh keys and the password is reset every 30 days). While looking in syslog I am seeing the below when lockouts are occurring:

Aug 1 16:06:32 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.
Aug 1 16:09:04 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.
Aug 2 16:06:29 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.
Aug 2 16:06:40 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.
Aug 2 16:09:01 some_server cimserver[2858]: PGS17200: Authentication failed for user webuser.

at other times it does authenticate with no problems:

Aug 2 16:10:28 some_server sshd[7073]: Accepted publickey for webutil from 10.xxx.xx.xx port xxxxx ssh2

I'm unfamiliar with cimserver, but I know we don't have it setup as any central management piece for our UX servers. Any ideas as to what could be causing this?

[Steven E. Protter]

Shalom,

cimserver is a management product that monitors your servers. It is possible the constant rebuilding of keys every thirty days, is causing a central cimserver to be unable to communicate with this system.

Therefore the account is being locked by the failure of a script to auto connect.

The idea of replacing public/private keys every thirty days is overkill.

Doing so every year or so is fine.

SEP

[Sean M.]

We are resetting the password on the account every 30 days; currently the account is using the same keys that we created 6 months ago.

[Sean M.]

No solution found, but closing thread