rohit_pandey Absent Member.
Absent Member.
642 views

SSPR-Intruder alert on wrong Challenge/Response attempt


Hi
We have a requirement that if someone attempts to enter a wrong
challenge response questions for a user using the SSPR, an email
notification should be sent out to the user alerting that someone tried
the challenge/response for that user.
Is there some way this can be achieved? Or if someone has attempted it,
an approach to this would be helpful.

Regards,
Rohit


--
rohit_pandey
------------------------------------------------------------------------
rohit_pandey's Profile: https://forums.netiq.com/member.php?userid=9842
View this thread: https://forums.netiq.com/showthread.php?t=56461

0 Likes
3 Replies
AutomaticReply Absent Member.
Absent Member.

Re: SSPR-Intruder alert on wrong Challenge/Response attempt

rohit,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

These forums are peer-to-peer, best effort, volunteer run and that if your issue
is urgent or not getting a response, you might try one of the following options:

- Visit https://www.microfocus.com/support-and-services and search the knowledgebase and/or check
all the other self support options and support programs available.
- Open a service request: https://www.microfocus.com/support
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.microfocus.com)
- You might consider hiring a local partner to assist you.
https://www.partnernetprogram.com/partnerfinder/find.html

Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.microfocus.com/faq.php

Sometimes this automatic posting will alert someone that can respond.

If this is a reply to a duplicate posting or otherwise posted in error, please
ignore and accept our apologies and rest assured we will issue a stern reprimand
to our posting bot.

Good luck!

Your Micro Focus Forums Team
http://forums.microfocus.com



0 Likes
Knowledge Partner
Knowledge Partner

Re: SSPR-Intruder alert on wrong Challenge/Response attempt

On 8/22/2016 2:04 AM, rohit pandey wrote:
>
> Hi
> We have a requirement that if someone attempts to enter a wrong
> challenge response questions for a user using the SSPR, an email
> notification should be sent out to the user alerting that someone tried
> the challenge/response for that user.
> Is there some way this can be achieved? Or if someone has attempted it,
> an approach to this would be helpful.


The way C/R works when logging into eDirectory, is via an NMAS module
that instead of using password, or token, or biometric, uses questions
and answers.

It counts as a login. A failed attempt (not of a single question, but of
the question set) counts as an intruder attempt.

So...

If you are using the non-NMAS C/R I do not think that happens.

There is a setting buried in there somewhere about faking a login
attempt for a C/R I seem to recall as well. (So many settings, thank
goodness for the search button! Who ever heard of search within
settings, all hail the Jason, the great and wonderful Jason, since that
is just plain brilliant).

So if using eDir NMAS, you could potentially have an IDM policy that
watched for Intruder Login Attempts (Or whatever the attr really is, I
forget) and when it changes, and send an email. Of course, a failed
login would generate the same.



0 Likes
rohit_pandey Absent Member.
Absent Member.

Re: SSPR-Intruder alert on wrong Challenge/Response attempt


Thanks! Let me explore this option


--
rohit_pandey
------------------------------------------------------------------------
rohit_pandey's Profile: https://forums.netiq.com/member.php?userid=9842
View this thread: https://forums.netiq.com/showthread.php?t=56461

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.