The Question is:
Where can I find some good, quotable references to satisfy "hard proof"
requirements for VMS security parameters? I have checked the OpenVMS Guide to
System Security, but was unable to find anything relating to "multiple signon
"automatically disabling accounts after x days of inactivity" topics. Is
there documentation somewhere that shows me the OpenVMS system defaults for
these, and why it is so? Thank you.
The Answer is :
OpenVMS does not provide tools specifically for these two purposes,
but it is simple to create the necessary enforcement tools as needed.
1: beyond the MAXJOBS process quota, use a check in SYLOGIN.COM,
or customize LOGINOUT using the available LGI interface.
2: periodically scan the SYSUAF entries for the last login date,
updating the username's expiration date as required.
ISVs and HP services may well be able to assist you here if you do
not wish to create these tools, as well.