topic Re: User Session in Operating System - HP-UX

User Session

Stefano_65 — Thu, 02 Sep 2004 09:15:05 GMT

Hi guys..
how is it possible, if is it, to limit a user to only one session per time?.. I want that a particular user runs a single session, not more than one at the same time.

thanx.

st.

Re: User Session

Bill Hassell — Thu, 02 Sep 2004 09:19:46 GMT

With the latest security patches on 11.0 or 11.11 (specifically patches for /usr/bin/login), you can put this into /etc/default/security:

NUMBER_OF_LOGINS_ALLOWED=1

Re: User Session

Bill Hassell — Thu, 02 Sep 2004 09:21:50 GMT

Note: this is for ALL users except root. For a single user to be restricted, you'll need to script the test in /etc/profile or /etc/csh.login.

Re: User Session

Stefano_65 — Thu, 02 Sep 2004 09:27:27 GMT

thanx dude

Re: User Session

Stefano_65 — Thu, 02 Sep 2004 09:34:13 GMT

--
Note: this is for ALL users except root. For a single user to be restricted, you'll need to script the test in /etc/profile or /etc/csh.login.
--

ehm.. but how I can do that?

Re: User Session

Bill Hassell — Thu, 02 Sep 2004 11:19:39 GMT

For POSIX shell, ksh, bash, etc users, add this at the top of /etc/profile just after the trap statement:

for ONESESS in bill joe carol jenny
do
CURRLOGIN=$(who -u | grep -c ^$ONESESS)
if [ $CURRLOGIN -ge 2 -a $(id -un) = $ONESESS ]
then
echo "\n\nNo more sessions allowed:"
ps -f -u $ONESESS
sleep 5
exit
fi

where: bill joe carol jenny
are the users that are only allowed 1 session. Expand/change that list as needed.

Re: User Session

Sundar_7 — Thu, 02 Sep 2004 11:47:56 GMT

There is a done missing at the end of the above script excerpt.

Here is an alternate way of doing it

define all the users in a file say /etc/ONLYSINGLESES

# vi /etc/ONLYSINGLESES
user1
user2
user3
#

# vi /etc/profile

grep -qi "^${LOGNAME}$" /etc/ONLYSINGLESES >/dev/null 2>&1

if [ $? -eq 0 ]
then
COUNT=$(who -u | grep "^$LOGNAME " | wc -l)
if [[ $COUNT -gt 1 ]]
then
echo "Only one session allowed for user: $LOGNAME"
sleep 2
exit
fi
fi

couple of advantages to the above excerpt

1) You dont have to execute the loop for all the users all the time.

2) You can dynamically define the list in the file than having to edit the script when the changes are to be mode.

Re: User Session

Stefano_65 — Fri, 10 Sep 2004 03:49:16 GMT

thanx guys!!!!