security issues / configuration

[Paul Torp]

hi.

i wonder how i can lock a useraccount after a certain amount of failed logins in a UNTRUSTED system.. like /usr/lbin/modprpw -m umaxlntr=6 "$logname" is in trusted.

i also wonder what the string in /etc/default/security should be to make it global in a TRUSTED system..

anyone?

regards
pål

[Patrick Wallek]

Not possible in an untrusted environment.

In a trusted environment, this is controlled by security policies, which can be seen via the getprpw command ('man getprpw' for more info). This is NOT configurable in the /etc/default/security file.

You should do a 'man security' for information on the security file.

[Steven E. Protter · Accepted solution]

Shalom,

On a non-trusted system you would need to look at this output.
lastb -R

You can run a cron script that checks this output user by user. At this point when you find three bad logins you can issue a passwd -l username command.

There is a script posted in the sysadmin scripts thread that does exactly this.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=51050

SEP

[Paul Torp]

hi..

i have tried looking for that script in section 2 and 3.. (of favorite scripts) but cant really find it..

i am running out of time and got deadline tomorrow to come up with something to solve the issue..

pal

[Paul Torp]

the sad sad thing is that i have no hpux boxes to test on atm.. (not even a production).. makes things a bit harder...

[Paul Torp]

found it SEP..

tnx