topic Re: Display Security Message - Before Users Login in Operating System - HP-UX

Display Security Message - Before Users Login

Laurie_2 — Mon, 10 Jun 2002 18:00:54 GMT

Hi All,

I need to display a Security Message before
users login to the system HP UX 11.0.

I had the message in /etc/motd but that is
after they log in.

Basically the message says..by loging on to
this system you agree to use the computer
information for business use only, etc. etc..
Legal stuff.

I think it would need to be with the
Login:
Password:
Prompts...before the Login and Password.

It's only about 5 lines of info, so it
shouldn't be too bad and in this age of
law suits it would help protect our data
if a bad employee starts doing bad stuff...
Legally we would be covered...somewhat.

Thanks,
Laurie

Re: Display Security Message - Before Users Login

PIYUSH D. PATEL — Mon, 10 Jun 2002 18:03:33 GMT

Hi,

you can modify the /etc/issue file and write your message in this file and save it.

Thats it....you are done.

Piyush

Re: Display Security Message - Before Users Login

Sridhar Bhaskarla — Mon, 10 Jun 2002 18:04:58 GMT

Laurie,

There are two important cases where you want to display your security banner.

1. At the console.
2. During the telnet session.

Place your contents in /etc/issue. It will take care of displaying at the console.

Edit your /etc/inetd.conf and add -b /etc/issue at the end of the telnet line (option to telnetd daemon). It should take care of your telnet sessions.

Also there are other situations where you want to display banners like ftp, sendmail interactive session etc.,. Look at ftpaccess and sendmail.cf files.

-Sri

Re: Display Security Message - Before Users Login

Pete Randall — Mon, 10 Jun 2002 18:05:38 GMT

Laurie,

In CDE, you can change the login screen itself to not say "Welcome to hostname" by changing the
!!Dtlogin*greeting.labelString:
in /usr/dt/config/C/Xresources

Hope this helps,
Pete

Re: Display Security Message - Before Users Login

Duncan Edmonstone — Mon, 10 Jun 2002 19:27:11 GMT

Also use the -B option on rlogind in /etc/inetd.conf to catch those users who sue rlogin rather than telnet.

HTH

Duncan