Re: Failed Login to Only Spit Out message after 3 Failed Tries

From: Spook (spectre_at_xtra.co.nz)
Date: 06/22/05 

Date: 22 Jun 2005 11:06:59 -0700

All,
It seems that what I need is to dump using OpenSSh and use the Solaris
9 version of sshd.

>>From there I need to configure MaxAuthTriesLog setting. This will allow
me to log the login failure *after* the number of failed attempts I
configured and *not* the first time the user enters the wrong password
when I have given him 3 chances.

Too bad OpenSsh didn't apply that functionality. I standardized all my
servers to using OpenSSh. Now to satisfy Sarbanes I have to use the
Solaris 9 sshd versions. Those with Solaris 8 will have to write a
groovy script to figure out *not* to lock out users who failed entering
the right password the first time but succeeded the second or third
time...

Relevant Pages

  • Re: Failed Login to Only Spit Out message after 3 Failed Tries
    ... It seems that what I need is to dump using OpenSSh and use the Solaris ... configured and *not* the first time the user enters the wrong password ... Solaris 9 sshd versions. ...
    (comp.security.ssh)
  • Re: Openssh, kerberos and Solaris 10
    ... if the problem is the Solaris 10 sshd is not saving ... other is used by pam :-( The man pages are not consistent ... rather live with this then to have to build OpenSSH and MIT Kerberos ... Solaris 10's sshd uses PAM, ...
    (comp.protocols.kerberos)
  • Do I have to use prngd or egd?
    ... I've just downloaded the new openssh and compiled it on a solaris box ... but when I start the sshd I keep getting the following message: ... Couldn't connect to PRNGD socket "/etc/entropy": ...
    (comp.security.ssh)
  • Re: ssh tunnel disappears
    ... traces show that not the client but the server closes the connection. ... i replaced the sshd that comes with solaris 9 by the openssh ...
    (comp.security.ssh)
  • Re: OpenSSH Password Aging/Expiration on UW2.1.3
    ... Try using gcc compiler. ... >difficulties with UnixWare and not Solaris. ... >> Look at the thread 'OpenSSH and forced password change' ... >>> When user bob attempts to login, ...
    (comp.security.ssh)