Article View: comp.sys.novell
Article #6115Re: Supervisor Lockout
From: T.C. Wolsey
Date: Thu, 18 May 1995 00:00
Date: Thu, 18 May 1995 00:00
52 lines
2984 bytes
2984 bytes
In article <3pchj8$fah@news-s01.ny.us.ibm.net>, jtpye@ibm.net says...
>
>In <3pcdvo$eul@wendy.ibmpcug.co.uk>, lms@soton.ac.uk (Leslie Styles)
writes:
>>Is there any way to remove Supervisor from the Intruder Detection Lockout
>>scheme. Although we do want to use lockout for all our user accounts, we
>>don't want people to be able to lock the Supervisor account by simply
>>typing login supervisor and not giving a password three times.
>>
>
>Not that I know of. However if the SUPERVISOR account is locked out the
>Console Command ENABLE LOGINS will will reset the SUPERVISOR account.
>
>This will only affect the SUPERVISOR account and no others.
>
>WARNING if you are using the Console Lock feature of the MONITOR.NLM any
>failed attempt at the password will be taken as an attempt at the
SUPERVISOR
>password.
>
>It is recommended that the SUPERVISOR password is not used for the Console
>Lock password because if the SUPERVISOR account is locked you are stuck.
>
ENABLE LOGIN will clear the SUPERVISOR account from the console, but if the
supervisor password is used to lock MONITOR, that same supervisor password
will _still_ unlock MONITOR. (You are not hosed, as stated above). A good
safety measure for the worst case scenario might be to get a copy of SETPWD
from netlab2.usu.edu. Keep it on diskette, and if push comes to shove,
power cycle the server and start the core os w/o the AUTOEXEC.NCF. Then you
can load SETPWD to change _any_ account password.
>Hope THAT helps...
>
>Cheers
>Jim Pye
>CNE/CNI
>Wellington, New Zealand
>
>eMail jtpye@ibm.net
>CIS 100240,27
>
>*** Hey!!! I've got my 32 bit multitasking OS already -- OS/2 Warp ***
--
---------------------------------------------------------------------------
T.C. Wolsey -- Systems Engineer
MCS Computerland * The opinions expressed may not be my own, *
1762 Central Avenue * but they may be those of my other personalities *
Albany NY 12205
Voice -- (518) 452-3700
tc@albany.net Fax -- (518) 452-3939
----------------------------------------------------------------------------
Technical Details
Message-ID:
<3pfkd0$2n9@apollo.albany.net>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<3pcdvo$eul@wendy.ibmpcug.co.uk> <3pchj8$fah@news-s01.ny.us.ibm.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fe659,904914b3379d21bf X-Google-Attributes: gidfe659,public X-Google-Thread: 10f035,904914b3379d21bf X-Google-Attributes: gid10f035,public X-Google-Thread: f8bf7,904914b3379d21bf X-Google-Attributes: gidf8bf7,public X-Google-Thread: 103bf6,904914b3379d21bf X-Google-Attributes: gid103bf6,public From: tc@albany.net (T.C. Wolsey) Subject: Re: Supervisor Lockout Date: 1995/05/18 Message-ID: <3pfkd0$2n9@apollo.albany.net> X-Deja-AN: 102835232 references: <3pcdvo$eul@wendy.ibmpcug.co.uk> <3pchj8$fah@news-s01.ny.us.ibm.net> organization: MCS Computerland mime-version: 1.0 newsgroups: comp.sys.novell,bit.listserv.novell,comp.os.netware.security,comp.os.netware.misc