Re: Preventing user profile lockout

Stu - if you would like to look at a product we wrote to address similar 
problems please feel free to look at www.safestone.com for DetectIT - Access 
Control.

What this allows you to do is to departmentalize (ise?) your users so that 
different security environments apply to different types of users.  

If you want to speak to someone local we have an office near Marlow, Bucks.

Regards 

Martin A Norman 
Technical Services
SafeStone Technologies 
mnorman@xxxxxxxxxxxxxxxx 
1-800-558-3544 

This email and/or attachments are privileged and confidential and intended 
solely for the addressee. If you are not the intended recipient, please notify 
us immediately. Disclosure, distribution or copying of this email other than by 
the addressee is strictly prohibited. The company does not warrant that the 
information is free of a virus or any other defect that may affect the 
recipient's computer system and it is your responsibility to scan attachments 
(if any).

------------------------------
message: 10
date: Mon, 21 Mar 2005 16:27:22 -0000
from: "Bramley, Stu" <stu.bramley@xxxxxxxxxxxxx>
subject: Preventing user profile lockout
I have a requirement to prevent certain service/connection accounts from being 
locked out - for example due to password validation errors. This is to prevent 
the profiles being deliberately locked out as part of a denial of service 
attack. 
We do not want to set QMAXSIGN to *NOMAX as this applies at a system, rather 
than an individual profile level. 
Does anyone know of a way to do this? Is there an exit point we can hook into 
when a user profile is disabled and use this either to stop the profile from 
being disabled or re-enable the profile? Is there a way to override this system 
value at an individual user profile level? 
Regards,
Stu
Stuart Bramley 
Senior Technical Developer 
Skandia Life::GroupIT 
Southampton 
t: 023 80 72 64 29 e: stu.bramley@xxxxxxxxxxxxx 
IBM Certified Specialist
Sun Certified Java Programmer