User lock duration.

[Roy Colica]

Once an account is locked, is it possible to customize a duration for which it is locked? Can this duration be configurable? Is it possible to have an automatic unlock?
We're workning on both PA-RISC 11.11 and IPF 11.23.
Thanks

[Steven E. Protter]

Shalom,

User must be manually unlocked.

You will need to script a solution to automatically unlock.

SEP

[F Verschuren]

I do not think this can be done automatic on hp using the comon security tooling
what you can do:
eiter config that all users are reactivated via the crontab.

#!/bin/sh
cat /etc/passwd |awk -F ":" '{ print $1}' |while read line
do
/usr/lbin/modprpw -k $line
done


ore you can use:
/usr/lbin/getprpw -m lockout $line
to build a better script that first checks if the user is locked and tan on the backgrount waits 29 minutes and that does the unlock, and run this script every 30 minutes in the crontab...

[SKR_1]

It's not the good practice to unlock the accounts automatically. We should manually unlock the accounts.

Thanks

SKR