Virtual TapeServer 8.3 Configuration Guide

134 | Virtual TapeServer Configuration Guide
Expiring passwords
By default, account passwords expire in 90 days (this does not apply to the bill or root accounts).
To change account expiration
1. Log in to the VTS server.
2. Enter the following command:
chage -M days user_acct
where days specifies the number of days after which the password expires, and user_acct
specifies the user account.
You can also use the following commands:
chage -l user_acct — Lists expiration information
chage -M -1 user_acct — Removes expiration from an account
Restricting access to bill
The bill account has the same access rights as the root account. You can restrict access of the bill
account, thereby forcing users to use vtsa and denying access to functions that may present security
vulnerabilities.
To restrict access to bill
1. Log in to the VTS server as root.
2. Edit the /etc/ssh/sshd_config file to add this line:
DenyUsers bill
Or, if a remote export job, Instant DR, or AutoCopy is configured in your environment, add this
line:
AllowUsers vtsa bill@source_svr
where source_svr is the IP address or hostname of the VTS server where the replication
operation is originating.
3. Restart the SSH service by entering this command:
service sshd restart