User Account getting locked often ..!!!!

[Justin_132]

Hi Admins,

Needa help !!!.. Im facing user account locking problem quite often..I can unlock after tha..But any advice to limit this problem..,,

- My system is already in trusted mode,
- Users are allowed thro, Secure logins (SSH), protocol ver.2,
- I had made policies for 3 un-successful logins,
- 30 days passwd expiry and 7 days before warning period.

Also, Do actually HPUX warns users before that paticular account gets expired, as like windows does..????

- Justin

[Raj D.]

Hi Justin ,

You can check ,

SAM-->

Auditing & Security --> System security Policies --> General security plolicies--> Unsuccessful Login Tries Allowed:

(Normally it used to keep 5 , if it less , users will be locked soon , with unsuccessful attempt.

And also check other password security policies.

cheers,
Raj.

[Steven E. Protter]

Shalom Justin,

The problem usually occurs when there is an inconsistent setting in the login configuration.

Usually its a problem with aging.

What I usually do is pick a good user and compare all the settings to a problem user.

Note that is is possible someone is licking the account with bad logins.

lastb

if the user is coming up, there is a problem. It could be a configuration problem that has a windows user attempting login to a HP-UX server that is not configured.

SEP

[Bill Hassell]

The first thing to do is to look at the lastb command, filtering on the problem user account. If you see 3 unsuccessful logins right next to each other (see the timestamp), then the user forgot the password, or worse, hit the useless CAPSLOCK key thus creating an invalid password. Not much you can do about this except increase the retry limit or rip the CAPSLOCK key off the keyboard and throw it away.