Who locked my id? Post: 302413699

Sponsored Content

Top Forums UNIX for Advanced & Expert Users Who locked my id? Post 302413699 by bluescreen on Friday 16th of April 2010 04:19:35 PM

04-16-2010

Registered User

Quote:

Originally Posted by nkamatam

This in reality is a application id. I just happen to know the password. The application uses this id to ftp files in and out. There are some other FTP jobs too that login using this id.

---------- Post updated 04-17-10 at 12:53 AM ---------- Previous update was 04-16-10 at 10:44 PM ----------

That just makes me think of the password locking (after x invalid attempts) as a bad practice. If I want to bother you, I would type your password wrongly for x times everyday.
Unless there is a way to identify (atleast the originating ip address) of the machine from which wrong attempt has been made, this see this as a bad practice.

I had this problem with DBA's trying to login as "oracle" and fat-fingering the password several times which locks the account. That by itself is not bad ... but ... then the cron jobs for "oracle" stop running and I get paged. Smilie

So, to prevent this from happening I added the following line in /etc/user_attr:

Code:

oracle::::lock_after_retries=no

This prevents the account from being locked if the password is not entered correctly after a few tries. There are security risks in doing this (brute force password guessing among others) so be careful if you implement this method.

HTH

bluescreen

View Public Profile for bluescreen

Find all posts by bluescreen

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

root locked out

Hello all. I think I have a big problem. the /etc/passwd file got overwritten and now I can't su as root when I telnet into this machine. I am running yp on a different machine and tried to push the passwd file out to all machines, but it didn't help. I noticed that there is a passwd file in...

2. UNIX for Dummies Questions & Answers

OpenWin Locked up

I have a server that is on solaris 9 and openwin is locked. The mouse won't respond and I can't seem to kill the openwin pid on the server.. Is there a command line to kill openwin from the server side?

3. AIX

locked a password

good morning just a confirmation, to lock a password for a user, we must to write 0 for password min age and password max age option ? thank you

4. HP-UX

locked out!

:confused: I have an K580 HP server. All I did was change the IP address on the NIC and now I can't telnet into it. I can ping, but no telnet. Also, it won't boot if the console monitor is plugged in. ANY IDEAS???

5. AIX

account is always locked out

we have a user name "Test1" that account is alwyas locked out. The user has been used to many servers to ftp a file from the main server. i already increase the MaxStartups to 99. And still after how many days account will locked.

6. Programming

Port is locked

Hi, I am working with sun solaris sparc 5.9 and I want to use the serial port in my application..when I am trying to use it.it is throwing the message-- So how can I check the serial port is locked or not and how can I unlock the port?? Thanks in advance.

7. AIX

User locked

hi, how to unlock the user,,, i want the command to unlock the user orbit.....

8. UNIX for Dummies Questions & Answers

I have files that are locked up...

Here's the story: I had an LaCie Internet Space (1TB)... Recently the network (or software) functions of the device just died... I tried to access it via different routers, checking UTP, tried everything possible to rule out physical damage to components. Then i got the disk out of its...

9. UNIX for Advanced & Expert Users

Passwd getting locked

Hi, there is a password lock problem happening everyday at one of the servers(GNU RH-Linux;kernel release version 2.6.18-308.20.1.el5) for a particular user id which is an appln user id. Everyday it needs to be reset by the owner/unix user mgmt team. My suspicion was if any cronjob was running...

LEARN ABOUT FREEBSD

lock

LOCK(1) 						    BSD General Commands Manual 						   LOCK(1)

NAME

     lock -- reserve a terminal

SYNOPSIS

     lock [-npv] [-t timeout]

DESCRIPTION

     The lock utility requests a password from the user, reads it again for verification and then will normally not relinquish the terminal until
     the password is repeated.	There are two other conditions under which it will terminate: it will timeout after some interval of time and it
     may be killed by someone with the appropriate permission.

     The following options are available:

     -n      Do not use a timeout value.  Terminal will be locked forever.

     -p      A password is not requested, instead the user's current login password is used.

     -t timeout
	     The time limit (default 15 minutes) is changed to timeout minutes.

     -v      Disable switching virtual terminals while this terminal is locked.  This option is implemented in a way similar to the -S option of
	     vidcontrol(1), and thus has the same restrictions.  It is only available if the terminal in question is a syscons(4) or vt(4) virtual
	     terminal.

SEE ALSO

     vidcontrol(1), syscons(4), vt(4)

HISTORY

     The lock command appeared in 3.0BSD.

BSD
								   July 10, 2002							       BSD