Our corporate security auditors insist logons on the HP3000 must "lock out"
for a period of time after a certain number of failed password attempts. I
know of no way this is possible, so I thought I would ask if anyone on the
list knows a way.

We currently use Vesoft's Security/3000 for security. But of course it can
only run following a successful logon. So there is no way it can count
number of failed password attempts when no successful logon has occurred.

Of course the HP3000 itself only allows three password attempt before a new
"HELLO" command must be entered. And the failed logon is logged, etc., etc.
But the auditors insist the particular user/account must then be locked out
from any further logon attempts for some period of time or until an
administrator resets it.

Anyone have any ideas if this is possible and how to do it?

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *