- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Create UNIX user with restrictions
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 05:51 AM
тАО04-26-2002 05:51 AM
Re: Create UNIX user with restrictions
*Where* do they type "xomni&"? In a (hpterm/xterm) window? If so, how do they *get* that window? If automatically (i.e. by X/CDE/VUE), then just put the "xomni" (no "&") in the startup (.profile) of that user/window and an "exit" after it. That will give them a 'busy' window with which they can do nothing, and the desired OmniBack GUI. This setup is not hacker-proof, but should be sufficient for a person which can be trusted, but might *accidentily* get hirself in trouble.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 06:16 AM
тАО04-26-2002 06:16 AM
Re: Create UNIX user with restrictions
This solution of updating the .profile has been given by me to many non-IT companies here for making them work only on their application and the moment the user is through with his application he is just logged out when he closed his application.
-Sukant
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 06:26 AM
тАО04-26-2002 06:26 AM
Re: Create UNIX user with restrictions
Create a user normally , and edit /etc/passwd file and in the last field replace the shell by rsh .In the home direcoty of the user , edit the .profile with whatever command you want to give for running omni back.
Manoj Srivastava
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 06:39 AM
тАО04-26-2002 06:39 AM
Re: Create UNIX user with restrictions
Adding the rsh in the password file definately works, not too sure what I need to add in the .profile. The command to access omniback is xomni or xomni&, and the path is /opt/omni/bin. So please advise as to what command to enter in the .profile, thanks.
Regards
Khurram
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 07:06 AM
тАО04-26-2002 07:06 AM
Re: Create UNIX user with restrictions
in the .profile
add export DISPLAY=
/opt/omni/bin/xomni
also please note that you might have to give omnibak group to this user , or change the group to 3 which that of the super user.
Manoj Srivastava
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 07:22 AM
тАО04-26-2002 07:22 AM
Re: Create UNIX user with restrictions
When I add the following:
export DISPLAY=194.60.97.70 (the IP for the DB server / UNIX server)
/opt/omni/bin/xomni
Now I get the error message:
Error: Can't open display: 194.60.97.70
The entry in the password file is as follows:
enduser:OVw7qGPBcfpBI:103:111:,,,:/home/enduser:/usr/bin/sh (if I change the sh to rsh, then I don't get anything at all)
The users are using Reflections to open a X terminal window, I would like to restrict them so that they can't change anything at UNIX.
Regards
Khurram
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 07:25 AM
тАО04-26-2002 07:25 AM
Re: Create UNIX user with restrictions
You can test this by putting a 'sleep 30' in your profile before the line of user's script, and try to break it when login.
cheers,
Gary
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 07:26 AM
тАО04-26-2002 07:26 AM
Re: Create UNIX user with restrictions
Assuming that the omni_user logs in from reflection.
create this user with a restricted shell and in his .profile, export his Display ( you may need to read the ipaddress of the PC from whereever this user logs in).
Also allow xomni& to be executed from the .profile.
To avoid the user from branching out to the shell , restrict him with TRAP.
In addition to this all omni executables ( /opt/omni/lbin,/opt/omni/bin) & configuration files ( /etc/opt/omni/*) may need to be given permissions for this user.
Just in case he needs to change the datalist or the schedules.
An alternative will be using SCM ( service control manager.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 07:29 AM
тАО04-26-2002 07:29 AM
Re: Create UNIX user with restrictions
I think I didnot make it clear , the IP that had to be exported is where the user is running the xomni and not that of the server .
Like i am using the desktop which has the reflection s/w loaded , i go to the dos prompt by typing command in the run mode in window , then i run a command ipconfig and get the IP address of the desktop . Also please modify the export DISPLAY as
export DISPLAY=aa.bb.cc.dd:0.0
Manoj Srivastava
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2002 07:35 AM
тАО04-26-2002 07:35 AM
Re: Create UNIX user with restrictions
May be I am not making it very clear, I will start from the very beginning:
The end users have different computers, so there IP addressses will not be statitc and are using windows NT. They log into UNIX using Refelections (X term), which after entering there name e.g. enduser, are asked to enter there password. Once that is complete they log into UNIX, and then they type in Xomni or Xomni& to access Omniback. I have already restricted access to Omniback, but not too sure how I can restrict the access to UNIX, as I don't want users to delete, move, copy or do anything at UNIX apart from type in Xomni or go to Omniback dirrectly. Whatever the advise, please list in detail the commands to be used, thanks.
Regards
Khurram