Disable account

[SILVERSTAR]

Hi,

in a non trusted system, is it possible to disable a user account if the password typed at login is wrong ?

Thanks
Angelo

[Cheryl Griffin]

That is only a feature of a Trusted system. Standard passwords do not have that feature.

[Franky_1]

Hi,

afaik this is only possible using trusted system (tsconvert)

Regards

Franky

[Bharat Katkar]

Angelo,
If you want you can convert your system into trusted system.
See the attached doc, describing the entire process and different commands assciated with it.

Hope that helps.
Regards,

[HGN]

Hi

This feature is available in trusted system so you think that is the way to go you can switch over to trusted system.

Rgds

Gopi

[Petr Simik_1]

convert to trusted mode in SAM by

SAM->auditing&security->System security policy

To setup account locking :
SAM-> auditing&security->general user account policies

there you include after how many unsucc attempts is account locked.

Be careffull by entering this option. This can be used hackers to initiate deny-of-services attack. Hacker just type wrong passwd to all your users and it disable all their accounts => your users become angry and everybody will call you.
It's recommended to include delay between attemts - it is possibble here too - it will make job for hacker a little harder.

Enjoy.
Petr

[Muthukumar_5]

We can do lock a user with scripting there. Do audit on lastb output to get bad login informations there. Check the time frame informations there. If they are relative then do disable that user.

I Suggest you not to include root use there. And One more validation is, user login based IP-Address, there are sometime, some one doesnot want another's user may make BAD login's with their account name.

We can get full details of bad logins as lastb -R, disable user login as,

passwd -d and do send informations to that user with mail there.

HTH.