topic RE: XOS account lockout policy setting in ExtremeSwitching (EXOS/Switch Engine)

XOS account lockout policy setting

shakil_khan — Sun, 23 Nov 2014 01:22:00 GMT

Hi
Can anyone tell me what the syntax is for setting an account when it is locked out so that it waits for 120 seconds then the user can re-try again to login?

configure account tom password-policy lockout-on-login-failures on

the above command allows the user tom to lock his account after 3 failed attemtps

RE: XOS account lockout policy setting

Drew_C — Tue, 02 Dec 2014 00:24:00 GMT

Hi Shakil,
EXOS currently doesn't support an option to automatically re-enable accounts based on a timer.
The command you have described is the closest match to what you're trying to accomplish.
configure account [ all | name] password-policy lockout-on-login-failures [ on | off]
You can configure the maximum number of failed logins before a session is terminated (except via SSH).
configure cli max-failed-logins num-of-loginsTo re-enable an account that has been locked out, an administrator must login and use this command.
clear account [ all | name] lockoutIf you'd like to submit a feature request to enable time-based unlock, I ask that you contact your local SE.

-Drew

RE: XOS account lockout policy setting

George_Georgopo — Tue, 02 Dec 2014 00:24:00 GMT

How it works with ssh? only 2 attempts allowed?

configure account "name" password-policy lockout-on-login-failures on
configure account "name" password-policy lockout-time-period 5

I know that this conf is about console connections. What if we need to lock out a user after "x" attempts in ssh. What is the status?