HP P9000 Command View Advanced Edition Suite Software 7.4.0-00 Administrator Guide (web) (TB581-96325, December 2012)

Table Of Contents
attempts is allowed. When you change a setting in the security.conf file, the change takes effect
immediately.
Unsuccessful attempts to log on to other products in the P9000 Command View AE Suite that use the
Single Sign-On function count towards the number of unsuccessful logon attempts. For example, if the
number of unsuccessful attempts is set to 3, and a user fails to log on to Device Manager once, fails
to log on to Tiered Storage Manager once, and then fails to log on to Replication Manager once, his
or her user account will be automatically locked.
If the number of unsuccessful logon attempts is changed, the new number will be applied the next
time an attempt to log on fails. If a user is currently logged on and you attempt to log on using his or
her account, but you fail the specified number of times, his or her user account will be locked. However,
the user can continue to perform operations while still logged on.
You can unlock user accounts from the GUI. To unlock a user account, you must have the Admin (user
management) permission.
CAUTION:
Settings related to locking can also be specified from the GUI. However, if the system is in a cluster
configuration, the settings from the GUI are applied only to the executing node. To apply the settings
to the standby node, switch the nodes, and then specify the same settings.
You can specify settings for automatic locking if P9000 Command View AE Suite product versions
5.1 or later are installed.
These settings are applied to all P9000 Command View AE Suite product versions, so there is a
risk of login failure if versions 5.0 or earlier (which do not support automatic locking) are being
used. If login fails despite a correctly specified user ID and password, take appropriate action,
such as unlocking the relevant user account and registering a new user account.
If an external authentication server is used to authenticate users, the settings on the external au-
thentication server are used to control automatic locking.
Settings for automatically locking the System account
When P9000 Command View AE Suite products are installed, the System account is initially not
subject to automatic or manual locking. If you want to also make the System account subject to
locking, specify this setting in the account.lock.system property in the user.conf file, which
is stored in the following locations:
In Windows:
installation-folder-for-Common-Component\conf\user.conf
In Linux:
installation-directory-for-Common-Component/conf/user.conf
If the user.conf file does not exist, create it.
Specify the account.lock.system property in the following format:
account.lock.system=value
Administrator Guide (Web Version) 105