Prohibit remote root login on AIX

Prohibit remote root login on Aix
 
The extended information of aix users is mostly in the/etc/security/user text file. You can modify:
Login = false users cannot log on to the system
Rlogin = false users cannot log on to the system remotely.
Su = false other users cannot switch to this user
If you have special requirements, simply use smitty lockuser to lock the specified user.
 

Disable telnet Logon
 
Smit chuser
 
-> Root
 
-> User can login REMOTELY (rsh, tn, rlogin) = false
 
Disable ssh Login
 
Vi/etc/ssh/sshd_config
 
PermitRootLogin no
 
Restart the ssh service
 
Stopsrc-s sshd
 
Startsrc-s sshd
 
 
If you do not allow the root user to log on directly, you can log on with another user and then su to the root user.
 
Another problem is that I have encountered a user named test who mistakenly entered the password multiple times and thus failed to log on. This allows me to log on locally and then identify the number of Logon errors.
 
Chuser unsuccessful_login_count = 0 test

Recommended reading:

How to switch the root user in Ubuntu