Operating System - HP-UX
1847583 Members
2950 Online
110265 Solutions
New Discussion

a problrm about trust system

 
SOLVED
Go to solution
lin.chen
Frequent Advisor

a problrm about trust system

my system is a trust system,there are 100 user account in my system!
now I need to change the security policy for all users(the same policy) as following.
1. Start SAM
2. Select 'Accounts for Users and Groups'
3. Select 'Users'
4. Select the user account you wish to modify
5. From the 'Actions' menu, select 'Modify Security Policies'
6. Select 'General User Account Policies'
7. Change to the desired number of login attempts allowed from
'Unsuccessful Login Tries Allowed'
-->You will have to select 'Custom' and then specify the number
of attempts that you wish to give that user account.

but it is terrible because i need do it for 100 times.
could you tell to how to change security policy for users in a simple way.
Many thanks!!!
3 REPLIES 3
Steven E. Protter
Exalted Contributor

Re: a problrm about trust system

Shalom

Same sam, nearby menu lets you set default security policy for the system. This will modify the behavior of all accounts.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Steven E. Protter
Exalted Contributor
Solution

Re: a problrm about trust system

Shalom

Same sam, nearby menu lets you set default security policy for the system. This will modify the behavior of all accounts.

You will need to write a custom script that activates all user accounts as well.

http://docs.hp.com/en/B2355-90672/B2355-90672.pdf

To lock:
/usr/lbin/modprpw -m exptm=0 username
To unlock:
/usr/lbin/modprpw -k userid

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
RAC_1
Honored Contributor

Re: a problrm about trust system

There are commands. man getprpw, modprpw, getprdef and modprdef.

You will have to do
modprpw -m umaxlntr=10 "user_name"

So you can do as follows.

logins -u | awk '{print $1}'|while read user
do
modprpw -m umaxlntr=10 ${user}
done

check with getprpw
getprpw -m umaxlntr user_name
There is no substitute to HARDWORK