Micro Focus Contributor
Micro Focus Contributor

Intruder Lockout

Good morning, I have a customer that is seeing some issues with Intruder
Lockout(s) Please see my initial message to them,

"Is the intruder lockout happening to more than one student account, or
is there just one account that seems to be getting locked out?
Are the users that are getting the lockouts contained in a specific
container, or again are they located in different containers throughout
the tree?
If we can start to see a pattern we can determine if an intruder
lockout has been set somewhere. The default time(s) for detecting
incorrect login attempts is 30 minutes, and lock account after detection
is 15 minutes.
You can check these settings in iManager by use the "Browse" feature
selecting on an "ou" and then checking the intruder detection tab.
Let me know if your seeing a pattern from the lockouts and we can move
forward from there."

This was their response back
"The school (OU) has Intruder Lockout values of 3 incorrect logins in a
30 minute interval with a 30 min reset time.
The Employee (OU) under the school has the same values per our Security
Department's SOP.
The Student (OU) has no values set on that container for Intruder
Lockout since we have a 'universal' account for student that is used at
all our schools except for one high school. The helpdesk is saying that
the number of incorrect logins for student used to be 6 or more and the
lockout time was 15 minutes. Now they are being locked out after fewer
incorrect logins and the reset time has jumped to 30 minutes. Since
there are no values for Intruder Lockout set on the Student OU or the
student account itself it appears that the Intruder Lockout values are
being inherited from the parent container, School (OU)."

Is the above a correct statement? Can the values be inherited from the
higher (parent) container?

dschaldenovell's Profile: http://forums.novell.com/member.php?userid=93234
View this thread: http://forums.novell.com/showthread.php?t=452245

Labels (1)
1 Reply
Knowledge Partner
Knowledge Partner

Re: Intruder Lockout

On Tue, 14 Feb 2012 12:56:02 +0000, dschaldenovell wrote:

> Is the above a correct statement? Can the values be inherited from the
> higher (parent) container?

No. Intruder Detection settings do not inherit. They are specific to the

David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.novell.com

Please post questions in the forums. No support provided via email.

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.