su failed logins

[strikelit]

I have an issue. if you su to oracle or whatever non expiring id and incorrectly insert the passwd,then it starts the unsuccessfull login count in lastlog, and if the loginretries is set to 3 and you su incorrectly 3 times, it will lock you out after the 3 attempts.

IS there a way in AIX that the failed logins are reset after the user successfully logs in via SU.

 

[khalidaaa]

when you su from root to any user, no prompt for password will apprear.

When you su from regular user to another, if you type the password incorrectly for the first time it will not ask you again, it will just kick you out.

when you try this for the number of times (loginretries) attribute is set, then user will be locked. That's how it works! IMHO I don't think there is a way to change this!

Regards,
Khalid

 

[khalidaaa]

Unless you have a cronjob in root that will reset unsuccessful login for that user (or some others)! But it is not recommended security-wise as it might be someone who is trying to hack your system!

Regards,
Khalid

 

[exsnafu]

consider setting up sudo for users to su to oracle. this way they don't need to fumble the oracle password, only their own.