LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 06-26-2010, 02:16 AM   #1
bhageshp
Member
 
Registered: Sep 2008
Location: Mumbai
Distribution: Redhat
Posts: 33

Rep: Reputation: 15
Cool Account lockout due to inactivity


Hi,

I has to lockout the inactive account after some days of user inactivity.
Anybody know how to configure account inactivity on RHEL4 and RHEL5.

Last edited by bhageshp; 06-26-2010 at 04:30 AM.
 
Old 06-26-2010, 04:40 AM   #2
bhageshp
Member
 
Registered: Sep 2008
Location: Mumbai
Distribution: Redhat
Posts: 33

Original Poster
Rep: Reputation: 15
Unhappy

This is my requirment - lock out accounts if its not active for 30 days. So if an account is created and the user hasn't logged in for 30 days, the account is to be locked until "root" unlocks it.
 
Old 06-28-2010, 08:20 AM   #3
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 14,592

Rep: Reputation: 2559Reputation: 2559Reputation: 2559Reputation: 2559Reputation: 2559Reputation: 2559Reputation: 2559Reputation: 2559Reputation: 2559Reputation: 2559Reputation: 2559
Quote:
Originally Posted by bhageshp View Post
Hi,

I has to lockout the inactive account after some days of user inactivity.
Anybody know how to configure account inactivity on RHEL4 and RHEL5.
Ok...since you've got RHEL, have you called them, since you're paying for support??? And what kind of authentication are you using? One box or many? Provide details.

And did you try to Google for this? There are scripts that do this:
http://www.digitalservitude.com/?s=s...active-30-days
 
Old 06-28-2010, 11:12 AM   #4
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora, Lubuntu, FreeBSD
Posts: 3,930
Blog Entries: 5

Rep: Reputation: Disabled
Quote:
Originally Posted by bhageshp
I has to lockout the inactive account after some days of user inactivity.
Anybody know how to configure account inactivity on RHEL4 and RHEL5.
You can accomplish this with the chage(1) command - see its manpages.
 
Old 07-02-2010, 11:59 AM   #5
idlehands
Member
 
Registered: Mar 2010
Distribution: zLinux, RHEL, Ubuntu, SUSE
Posts: 50

Rep: Reputation: 16
vlock?
I think the NSA linux hardening docs also discuss how to do this.

something like:

echo "TMOUT=900" >> /etc/profile.d/tmout.sh
chmod +x /etc/profile.d/tmout.sh
chmod 755 /etc/profile.d/tmout.sh
mv tmout.csh autologout.csh
 
Old 07-02-2010, 01:27 PM   #6
HasC
Member
 
Registered: Oct 2009
Location: South America - Paraguay
Distribution: Debian 5 - Slackware 13.1 - Arch - Some others linuxes/*BSDs through KVM and Xen
Posts: 329

Rep: Reputation: 55
Code:
$ man chage
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Account lockout with PAM thllgo Linux - Security 1 04-22-2009 02:54 PM
account lockout threshold pasupuleti Programming 3 10-03-2006 12:11 AM
Account lockout threshold moinpasha Linux - Security 10 09-28-2006 07:27 AM
Logging account lockout sbrewer Linux - Security 1 10-22-2005 03:48 PM
Automatic Account lockout jimrt Linux - Security 3 03-26-2003 08:32 PM


All times are GMT -5. The time now is 05:41 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration