Hitachi CE50-10, Instruction Manual

Page: 81 / 194

$ sudo passwd -l root
passwd: password expiry information changed.
(2) Setting account lock for a failed login
This function prohibits login for a certain period after a certain number of login attempts fail due to password error.
This function is enabled by default.
Default account lock settings
• Number of times an invalid password can be entered: 10
• Login prohibited time: 30 minutes
1. Edit the configuration file to disable or enable the function and change the settings.
$ sudo vi /etc/pam.d/common-auth
2. In the
common-auth
file, check the line succeeding to
# Account Lock configuration
.
# Account Lock configuration
auth required pam_tally2.so deny=10 unlock_time=1800
How to disable the account lock
If you want to disable the function, add a hash mark (#) at the beginning of the line, as shown below.
# Account Lock configuration
#auth required pam_tally2.so deny=10 unlock_time=1800
How to enable the account lock
If you want to enable the function again, delete the hash mark (#).
The following describes how to change the settings.
• Specify
deny=10
to lock the accounts if an invalid password is entered 10 times in succession.
• Specify
unlock_time=1800
to unlock the account after 1,800 seconds.
You can change the settings by changing the numeric values.
For set values, use 1 or greater half size integers.
(3) Setting the login timeout
This function allows the unit to automatically log out if no operation has been performed for a certain period. This
function is disabled by default.
1. Edit the configuration file (
/etc/profile
) to enable the function.
$ sudo vi /etc/profile
2. For example, if you want the unit to automatically log out if no operation has been performed for 10 minutes (600
seconds), add the value to the end of the /etc/profile file as follows.
export TMOUT=600
Note
For set values, use 0 or greater half-size integers.
Set 0 to disable this function.
5.12.2 Setting password policies
You can specify the following settings for passwords of users who log in to the unit:
• Password conditions
• Password generation management
5. Configuring Software Environment
65