aix 보안 /etc/security/lastlog

⦁ Login prompt 상에서, User name과 password를 입력한다.

⦁ Login program은 입력된 ID/PW를 /etc/passwd와 /etc/security/passwd 과 비교하여, 입력된 값이 정확한지 검증한다.

⦁ 해당 입력 값 중에, User name은 정확하게 입력하였으나, password를 잘못 입력했을 경우, 입력한 계정의 unsuccessful_login_count가 실패횟수만큼 올라가며, 이로 인해 해당하는 계정이 Lock(잠김)이 걸릴 가능성도 생긴다. 특정 계정의 로그인 실패 횟수를 확인하기 위해서는 아래와 같은 방법으로 확인할 수 있다.

***************************************************************************************************

*  valid user attributes for /etc/security/lastlog:
*
*time_last_login                         The last time that the user
*                                             successfully logged into the system.
*
*time_last_unsuccessful_login       The time that the last unssuccessful
*                                           attempt to log in as the user was made.
*
*tty_last_login                           The last tty port that the user
*                                            successfully logged into.
*
*tty_last_unsuccessful_login         The tty port of the last unsuccessful
*                                           attempt to log in as the user was made.
*
* host_last_login                      The host from which the user logged in
*                                         from if the tty was not locally attached. This implies that
*                                          the user used telnet or rlogin to log into the system.
*
*
*

 

 

 

[ibm_aix:root] # cat /etc/security/lastlog

    root:

            time_last_login = 1339152601

            tty_last_login = /dev/vty/0

            host_last_login = IBMhostname

            unsuccessful_login_count = 0       <--root 계정의 login 실패 횟수

            time_last_unsuccessful_login = 1641469331

            tty__last_unsuccessful_login = ssh

            host__last_unsuccessful_login = 172.11.X.XXX       <==

 

infraleesh

            time_last_login = 1339152601

            tty_last_login = /dev/pts/0

            host_last_login = 192.168.X.XX

            unsuccessful_login_count = 0  

           time_last_  unsuccessful_login = 0    

           tty_last_unsuccessful_login = 0     

            host_last_unsuccessful_login = 172.10.X.XX

 

 

 

 

    

출처: https://bluelogger.tistory.com/entry/AIX-Login-절차 [AIX for System Engineer]