Link to home
Start Free TrialLog in
Avatar of run_time_error
run_time_error

asked on

Solaris Account Locking

Hi,

I am trying to setup account locking in Solaris 9.
I have made the changes in /etc/default/login where
among other things I have
RETRIES=5 and
SYSLOG_FAILED_LOGINS=5
and in /etc/user_attr I am added:
test_user::::lock_after_retries=yes

Still I am not able to lock test_user after successive
unsuccessful logins.
Where could be the problem?

Any help is appreciated.
rte
Avatar of PsiCop
PsiCop
Flag of United States of America image

RETRIES=5 merely says how many login tries are permitted before the connection is severed. It also only applies to the UNIX login mechanism, not to, say, SSH-based logins.

SYSLOG_FAILED_LOGINS=5 also only applies to the UNIX login mechanism, and merely specifies how many failed logins must happen during a connection before an entry is made in the system log (as specified in /etc/syslog.conf)

Are you logging in thru SSH?
ASKER CERTIFIED SOLUTION
Avatar of Tintin
Tintin

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Tintin
Tintin

One thing to keep in mind is that Solaris 10 has much better account/password security options over previous Solaris releases.