SSH unsuccessful login attempts

[Josee Pouliot_1]

I would like to know if there is a way that SSH locks a user account after 5 unsuccessful login attempts.

We have the A.03.71.000 version.

Thank you.

[Sanjay_6]

Hi Josee,

If the system is trusted and it is set to disable a user account after 5 unsuccessful attempts, it should lock the account after 5 unsuccessful login attempts using ssh.

Hope this helps.

Regds

[Rick Garland]

There is no mention in the sshd_config or the ssh_config files concerning this feature.

Trusted systems you can specify how many unsuccessful logins to lock an account

[Josee Pouliot_1]

The system is Trusted. However, the account doesn't get lock after 5 unsuccessful login attempts via SSH...

[Rick Garland]

Does an account get locked after some number of unsuccessful attempts? Any number of unsuccessful attempts?

[Josee Pouliot_1]

Let's say I'm already on a system and I try to get to another system. My account will get lock if I failed to login properly 5 times.

I am using PutTy, could this change anything?

[Sanjay_6]

Hi,

What is the output of the command,

/usr/lbin/gerprdef -m umaxlntr

It this "5" or more.

Also check on the value of "umaxlntr" for the user using the gerprpw command.

Is this set to "-1". If so it means go by the default and the default should be the value you are getting from the 1st command.

Hope this helps.

Regds

[Josee Pouliot_1]

cnisp007:root:/root >/usr/lbin/getprdef -m umaxlntr
umaxlntr=5

[Josee Pouliot_1]

I just did more tests. It seems that the account gets lock but after 8 attempts...

Does it start to count at the first unsuccessful login?

[Josee Pouliot_1]

Here is a good one: when I set umaxlntr at 2, the account gets deactivated after 5 unsuccessful attempts...

[Andrew Cowan]

Are you using "uselogin yes" in "/etc/ssh/sshd_config"? This is a security risks however it should fix this problem.

There are several versions of SSH that don't properly interface with the failed_login count. The main reasons are either that the version you have was compiled for an earlier version of HP-UX, or it is missing a patch.