Very Computer

HI

Is there anyway you set the amount of times a user ties to login and fails,
then the account is locked out !

Also when trying to use Password aging on a 2.6 server, even if I try and
create a new user, and then add password aging, I keep getting 'Password
aging is disabled'
I cannot find out, how to Enable-it !!

Help Please !!!

Thanks

Jason

As far as I am aware, there is no built-in mechanism for this. The
creation of /var/adm/loginlog will cause login to log all instances of
five or more login failures. One could use this as basis for an automated
lockout.

Having said that, locking accounts because of some number of login
failures is inventing a DOS condition. A more sophisticated approach would
be better, like having an increasing delay between allowed login attempts.

I don't know if Solaris 7 or 8 have improved this area.

I can amuse to see entries appear in loginlog and call the user offering
to help with their login problem.

Quote:> Also when trying to use Password aging on a 2.6 server, even if I try and
> create a new user, and then add password aging, I keep getting 'Password
> aging is disabled'

How are you trying to enable aging?

Take a look at passwd(1). There are three switches for setting the aging
parameters. This is also more flexible that putting the *WEEKS lines in
/etc/default/passwd, since you have a resolution of days rather than
weeks.

--
 ________________________________________________________________________

From login(1):

See file /etc/default/login

               RETRIES   Sets the number of retries  for  logging
                         in (see pam(3)). The default is 5.

... and other stuff.

Cheers,

Andy

J>HI

J>Is there anyway you set the amount of times a user ties to login and fails,
J>then the account is locked out !

J>Also when trying to use Password aging on a 2.6 server, even if I try and
J>create a new user, and then add password aging, I keep getting 'Password
J>aging is disabled'
J>I cannot find out, how to Enable-it !!

J>Help Please !!!

J>Thanks

J>Jason

--
   +---------------------------------+--------------------------------+

   | Department of Neurology         | FAX   - (530)754-5036          |
   | University of California, Davis |                                |
   +---------------------------------+--------------------------------+