Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Configure System Account Lockout

By default, the storage servers are configured to lock system accounts after five consecutive failed authentication attempts.

To change this threshold, perform this procedure.

1. Log into the storage server as celladmin.

   See Log into the Storage Server OS.

2. Change the threshold.

   To comply with U.S. Department of Defense security requirements, specify a value of 3. If necessary, replace that value with one that is compliant with your local site policy.

   # /opt/oracle.cellos/host_access_control pam-auth --deny 3
   

3. Verify the setting.

   # /opt/oracle.cellos/host_access_control pam-auth --status | grep deny=