SCO Login: prompt 1

[Steve Bowman]

I have a security consultant asking that the re-apperance of the login promped be delayed after a failed attempt. The logic is that if a "bot" of sorts was used against the system a delay prompt would help foil this type of attack.

Is there a way to delay a login prompt on SCO 5.0.7?

Steve Bowman
Independent Technology, Inc.
CA, USA

 

[stanhubble]

yes

scoadmin->System->Terminal Manager->Options
will allow you to set the defaults, but you can also control it on a per device level

 

[Steve Bowman]

That worked great, Thank You

Steve Bowman
Independent Technology, Inc.
CA, USA

 

[apeasecpc]

Make sure you are also lock accounts after a set number of failures. This simple precaution thwarts all dictionary and brute force attacks against any user account. Once this is in place, hackers would have a better chance of winning the lotery than breaking in to your system through a login attack algorithm. You would be surprised how many major companies and government servers don't do this.

 

[Steve Bowman]

Good suggestion, already have account lock outs established

Steve Bowman
Independent Technology, Inc.
CA, USA

 

[stankow]

From other side it is very annoing for daily use if you mistype the password to wait 3 or 5 seconds. I allways switch off delay time for console sessions or at least for tty01-tty03

Stankow,

http://www.noac.biz