🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.sys.novell
Article #6115

Re: Supervisor Lockout

#6115
From: T.C. Wolsey
Date: Thu, 18 May 1995 00:00
52 lines
2984 bytes
In article <3pchj8$fah@news-s01.ny.us.ibm.net>, jtpye@ibm.net says...
>
>In <3pcdvo$eul@wendy.ibmpcug.co.uk>, lms@soton.ac.uk (Leslie Styles) 
writes:
>>Is there any way to remove Supervisor from the Intruder Detection Lockout
>>scheme. Although we do want to use lockout for all our user accounts, we
>>don't want people to be able to lock the Supervisor account by simply
>>typing login supervisor and not giving a password three times.
>>
>
>Not that I know of. However if the SUPERVISOR account is locked out the 
>Console Command ENABLE LOGINS will will reset the SUPERVISOR account.
>
>This will only affect the SUPERVISOR account and no others.
>
>WARNING if you are using the Console Lock feature of the MONITOR.NLM any
>failed attempt at the password will be taken as an attempt at the 
SUPERVISOR
>password.
>
>It is recommended that the SUPERVISOR password is not used for the Console
>Lock password because if the SUPERVISOR account is locked you are stuck.
>
ENABLE LOGIN will clear the SUPERVISOR account from the console, but if the 
supervisor password is used to lock MONITOR, that same supervisor password 
will _still_ unlock MONITOR. (You are not hosed, as stated above). A good 
safety measure for the worst case scenario might be to get a copy of SETPWD 
from netlab2.usu.edu. Keep it on diskette, and if push comes to shove, 
power cycle the server and start the core os w/o the AUTOEXEC.NCF. Then you 
can load SETPWD to change _any_ account password.

>Hope THAT helps...
>
>Cheers
>Jim Pye
>CNE/CNI
>Wellington, New Zealand
>
>eMail jtpye@ibm.net
>CIS 100240,27
>
>*** Hey!!! I've got my 32 bit multitasking OS already -- OS/2 Warp ***

-- 
---------------------------------------------------------------------------
T.C. Wolsey -- Systems Engineer     
MCS Computerland           * The opinions expressed may not be my own, *
1762 Central Avenue     * but they may be those of my other personalities *
Albany  NY 12205                     
                                               Voice  --  (518) 452-3700
tc@albany.net                                  Fax    --  (518) 452-3939
----------------------------------------------------------------------------
Technical Details
Message-ID: <3pfkd0$2n9@apollo.albany.net>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <3pcdvo$eul@wendy.ibmpcug.co.uk> <3pchj8$fah@news-s01.ny.us.ibm.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fe659,904914b3379d21bf
X-Google-Attributes: gidfe659,public
X-Google-Thread: 10f035,904914b3379d21bf
X-Google-Attributes: gid10f035,public
X-Google-Thread: f8bf7,904914b3379d21bf
X-Google-Attributes: gidf8bf7,public
X-Google-Thread: 103bf6,904914b3379d21bf
X-Google-Attributes: gid103bf6,public
From: tc@albany.net (T.C. Wolsey)
Subject: Re: Supervisor Lockout
Date: 1995/05/18
Message-ID: <3pfkd0$2n9@apollo.albany.net>
X-Deja-AN: 102835232
references: <3pcdvo$eul@wendy.ibmpcug.co.uk> <3pchj8$fah@news-s01.ny.us.ibm.net>
organization: MCS Computerland
mime-version: 1.0
newsgroups: comp.sys.novell,bit.listserv.novell,comp.os.netware.security,comp.os.netware.misc