Re: Account Lockout in Solaris 8

Hello Kenneth,
	Thank you Darren for the wonderful plug. Yes, we have modules that you 
can download and use for free. If you want the source code for an audit 
it can be arranged. Please make sure that you are running version 1.04 
(there was a security hole in 1.03 - obviously not enough auditing). 
People at version 1.03 please upgrade.

You can select one of three behaviours with our PAM module: Lock the 
account and have the password reset by admin. Lock the account and have 
the login flag reset by admin (i.e. things that use the password, but 
not the module will still work), and lockout for a period after the 
selected number of bad attempts.

The advantage of the lockout period is that it defeats the multi-trial 
attempts, and allows the user to know that something has happened 
(especially if you set it to 1 day or there abouts) but does not require 
admin intervetion - no social engineering attacks.

We have a bunch of other PAM modules available for other purposes too.

Rex di Bona
Computer Smiths

Darren Hoch wrote:
> Hello Kenneth,
> 
> Solaris 8 does not provide this feature by default. However, you can 
> install some GPL modules from:
> 
> http://www.comsmiths.com.au/pam/
> 
> They have a login_limit pam module that can be inserted into the stack. 
> I have used it both on Solaris 8 and Solaris 9.
> 
> Darren
> 
> Kenneth Denski wrote:
> 
>> Does anyone know if it is possible to implement account lockouts in 
>> Sun Solaris 8? I want to set it so that after 3 bad login attempts, 
>> the user is locked out and must be reset by the Admin.
>>
>> Is there any way to do this?  
>>
> 
>