Account Lock

[Arasu Krishnan]

Hi
I would like to know. Like NT if somebody tries account for more than three or more than that times the account will be locked.
Is that facility is available on HPUX.
If its there how to implement.

I found some document on this but i didnit find useful for me.
t_maxtries This field specifies the maximum number of consecutive
unsuccessful login attempts permitted using the
terminal before the terminal is locked. Once the
terminal is locked, it must be unlocked by an
authorized administrator.

Upon each login failure, t_failures is incremented. When this
value reached the value of t_maxtries, any user attempting to log
onto the device received:

Terminal is disabled see Account Administrator

However, there is no documentation in ttys(4) regarding the field
t_failures and no way to re-enable the terminal except to edit
/tcb/files/ttys and either decrease the value of t_failures to 0 or
remove the field completely.

[harry d brown jr]

Actually, its NT has security similar to unix, except that unix is much more secure!

http://docs.hp.com/hpux/onlinedocs/B2355-90742/00/00/58-con.html

live free or die
harry

[eran maor]

Hi

from what i know , there is the ablilty of this if you will convert your system to be a trusted system .

trusted system are hp-ux with extra securety that gives you the ablilty to change the default behav. of issues like this .

you can define that after a password was expire the acount will be lock or like you told if after some tried of login the user will be loc k.

you are defining the number of time that a user can try to login .

i will advise you to go to www.docs.hp.com and get the pdf of manage trusted system and read about this .

[sathish kannan]

Hello Arasu,
You have to convert your system to Trusted. The easy way to conver your system to Trusetd is by running SAM. Run SAM and select "AUDITING AND SECURITY" then select "SYSTEM SECURITY POLICIES". If your system is not in trusted you can convert it now. You can set policies like Password Aging, Minimum password length, Account lifetime globally. Another advantage of trusted is the password field in /etc/passwd file will be * and password is maintained on /tcb directory.

Best of Luck.

Regards
Sathisk