account lockout problem with solaris and active directory

[Douglas E. Engert]

tulanian at gmail.com wrote:

> I don't know if this is a kerberos problem or not. I've gotten kerberos
> authentication to work on my Solaris 9 box to an Active Directory
> domain but we're having problem with account lockouts. The threshold in
> AD is set to 10 failed login attempts, but a single bad password at the
> unix login prompt generates a flurry of failed attempts via kerberos,
> locking the account. Does anyone know why this could be happening?


Could be PAM is trying more then once, or if you are using openssh, it
cold be trying Password authentication, then PAM.

> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 
> 

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444