Account lockout due to inactivity

bhageshp · 06-26-2010, 02:16 AM

Hi,

I has to lockout the inactive account after some days of user inactivity.
Anybody know how to configure account inactivity on RHEL4 and RHEL5.

bhageshp · 06-26-2010, 04:40 AM

This is my requirment - lock out accounts if its not active for 30 days. So if an account is created and the user hasn't logged in for 30 days, the account is to be locked until "root" unlocks it.

TB0ne · 06-28-2010, 08:20 AM

Quote:

Originally Posted by bhageshp

Hi,

I has to lockout the inactive account after some days of user inactivity.
Anybody know how to configure account inactivity on RHEL4 and RHEL5.

Ok...since you've got RHEL, have you called them, since you're paying for support??? And what kind of authentication are you using? One box or many? Provide details.

And did you try to Google for this? There are scripts that do this:
http://www.digitalservitude.com/?s=s...active-30-days

anomie · 06-28-2010, 11:12 AM

Quote:

Originally Posted by bhageshp

I has to lockout the inactive account after some days of user inactivity.
Anybody know how to configure account inactivity on RHEL4 and RHEL5.

You can accomplish this with the chage(1) command - see its manpages.

idlehands · 07-02-2010, 11:59 AM

vlock?
I think the NSA linux hardening docs also discuss how to do this.

something like:

echo "TMOUT=900" >> /etc/profile.d/tmout.sh
chmod +x /etc/profile.d/tmout.sh
chmod 755 /etc/profile.d/tmout.sh
mv tmout.csh autologout.csh

HasC · 07-02-2010, 01:27 PM

Code:

$ man chage