Re: Account Lockout in Solaris 8

[email protected]
Newsgroups gmane.comp.security.sun
Message-ID <[email protected]>
Thanks to everyone who responded to my question re: Solaris account
lockout. Lots of great answers, I am going to evaluate all of the
possibilities and come up with a solution.

Ken Denski




                                                                                                                                       
                      Kevin L Prigge                                                                                                   
                      <[email protected]>         To: Kenneth L Denski/US/ABAS/PwC@Americas-US                                            
                      10/14/2003 09:28         cc: [email protected]                                                         
                      AM                       Subject:  Re: Account Lockout in Solaris 8                                              
                                                                                                                                       
                                                                                                                                       
                                                                                                                                       




On Tue, Oct 14, 2003 at 04:09:38PM -0000, Kenneth Denski wrote:
>
>
> Does anyone know if it is possible to implement account lockouts in Sun
Solaris 8? I want to set it so that after 3 bad login attempts, the user is
locked out and must be reset by the Admin.
>
> Is there any way to do this?

Not with stock Solaris 8, AFAIK.   I'm guessing you've been tasked
with implementing this based on a requirement from your Audit area.

Make sure they know that there are real DOS possibilities with a
scheme such as this, and just because this functionality was available
on IBM mainframes, it doesn't make it a good or useful idea.

--
Kevin Prigge, SCNA            #
Internet Services             #
University of Minnesota       #




_________________________________________________________________
         The information transmitted is intended only for the person or
         entity to which it is addressed and may contain confidential
         and/or privileged material.  Any review, retransmission,
         dissemination or other use of, or taking of any action in reliance
         upon, this information by persons or entities other than the
         intended recipient is prohibited.   If you received this in error,
         please contact the sender and delete the material from any
         computer.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.