Thanks to all. In particular, Denise Dumas of Compaq (nee DEC), sent
succinct answers to my questions. She, along with most of the rest,
pointed out that
# usermod -x administrative_lock_applied=0 <user>
would unlock the user. She also suggested "-x grace_limit",
undocumented in my 4.0F system; so maybe that's a 5.x feature. She also
suggested "xhosts +" for my X problem.
However, the winning suggestion, by several of you, was to clear
u_numunsuclog# to 0. Turns out some of my users were not paying
sufficient attention to the instructions on the screen to successfully
change their passwords. One woman had been trying for *17* times before
she gave up. I changed u_maxtries# to 0 (no limit to number of failed
tries) in /etc/auth/system/default. It'll stay that way until these
people catch on. The majority of my users had *no* problems.
I hadn't thought to try usermod since when I first enabled C2 I'd tried
to set some C2 defaults via usermod -D, and gotten nothing but a usage
message for my trouble.
I used convauth -O to change from using the .db files to plain ASCII.
And, yes, I had read the prpasswd(4) and default(4) man pages. There's
no line in there which says, "Set this to this to unlock users who've
exceeded their u_maxtries failed logins because they've repeatedly
failed to change their password correctly."
Hugh.Pritchard_at_DC.gov wrote:
> I've enabled C2 over the weekend.
> All users are being asked to change their passwords; this is OK.
> Some users are being locked out, with "Your account is disabled -- see
> administrator."
> How do I unlock these people? I DO NOT HAVE USE OF DXACCOUNTS!
(That's
> another problem: enabling access from my PC's X server--hints in the
> Security manual don't seem to help.)
> I am using edauth; but I need to know which u_whatever to modify.
_______________________________________________________________________
Hugh Pritchard (Tier Technologies), 202-724-4690
D.C. Ofc of Corporation Counsel, Child Support Enforcement Division
440 4th St NW, Suite 550, Washington, DC 20001
mailto:Hugh.Pritchard_at_DC.gov
Received on Tue Jun 05 2001 - 22:24:34 NZST