/etc/default/security

[Lori Burgess]

I was wondering if there is a way to put exceptions into the security file. Example would be everyone but this user is allowed to only login three times?? Is this possible??

Thanks

[Patrick Wallek · Accepted solution]

That can't be done in /etc/default/security, BUT if the system is trusted then you can go into SAM and modify the security policies for individual users. If you want to work from the command line, you can use the modprpw command.

If you are on HP-UX 11.11 or later, 'man modprpw' for more information.

[Pete Randall]

I don't think the security file handles exceptions like this. You would be better off to add this logic to /etc/profile, testing the user and the number of logins and exiting if more than three.


Pete

[Lori Burgess]

Thank you for your reply! I just wanted to make sure there was no way to do this in the security file.

[Lori Burgess]

all set thank you very much

[doug hosking]

As previously noted, your best bet is probably to change the system defaults, then override in individual user accounts. On newer versions of HP-UX 11.23 and later, you can use userdbset to do this. If in trusted mode, the process is a bit different. (/usr/lbin/modprdef changes system defaults, while /usr/lbin/modprpw changes individual accounts. Usually you would want to manipulate these through SAM.)