[Freeipa-users] Re: admin account getting locked

hedrick--- via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:

We have a number of systems on the internet. They are constantly attacked through ssh. A lot of attacks try to guess passwords for a user called “admin.”

If you don't need the user admin on the outside facing boxes, you could try that in /etc/sss/sssd.conf:

,---- | ... | [nss] | homedir_substring = /home | filter_users = root, admin | ... `----

Jochen