topic Re: restricting normal user logins in Operating System - HP-UX

restricting normal user logins

dhanish — Tue, 02 Jul 2002 11:38:44 GMT

Hi,
Please let me know how can i restritcy any normal user login in HPUX,As i am going to do some admin work on the system and i do not want any user to login except root.It is same like /etc/noilogin file on Sun Solaris

Re: restricting normal user logins

Pete Randall — Tue, 02 Jul 2002 11:40:51 GMT

Result from a search on "restrict user login":
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xd686663ce855d511abcd0090277a778c,00.html

HTH,
Pete

Re: restricting normal user logins

Peter Kloetgen — Tue, 02 Jul 2002 11:41:56 GMT

Hi Nitin,

you can simply comment out all user entries in /etc/passwd by putting a # in front of the line. This would do it for you.

Allways stay on the bright side of life!

Peter

Re: restricting normal user logins

PIYUSH D. PATEL — Tue, 02 Jul 2002 11:42:44 GMT

Hi,

1. The best is to go to boot the system in single user mode and do the admin work.

2. init s ( this is same as the single user mode but here all the filesystems are also mounted )

I dont think that there is such a file or similar file called /etc/noilogin in HPUX.

Piyush

Re: restricting normal user logins

dhanish — Tue, 02 Jul 2002 11:43:05 GMT

Hi,
I am not using local /etc/passwd , my machine is NIS client.

Re: restricting normal user logins

Pete Randall — Tue, 02 Jul 2002 11:43:45 GMT

And this, from a search on "/etc/nologin":
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x038fe8644a22d411ade70090279cd0f9,00.html

HTH,
Pete

Re: restricting normal user logins

Pete Randall — Tue, 02 Jul 2002 11:48:28 GMT

A couple more:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x406a1cc6003bd6118fff0090279cd0f9,00.html
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x038fe8644a22d411ade70090279cd0f9,00.html
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x5e730b0717d1d5118ff40090279cd0f9,00.html

Check out Patrick Walleck's comment in the last thread.

Pete

Re: restricting normal user logins

Nick Wickens — Tue, 02 Jul 2002 11:58:38 GMT

Kick everyone out of the system, logon to the console and disable the lancard with ifconfig.

Re: restricting normal user logins

Sean McConkey_2 — Tue, 02 Jul 2002 12:01:08 GMT

Personally one of the most I find one of the most efficient way's of doing this modify everyones shell to a menu script. This is far more secure in the first instance then giving people access to the shell.

I used a script that would only allow certain people access to the shell, ie developers not normal users.

When you want to restrict logins all you do is rename the original script and have a script that displays a message and immediately exits.

That way users get a message and don't start ringing you up when you are busy saying I can't get in.

HTH

Sean

Re: restricting normal user logins

Sanjay_6 — Tue, 02 Jul 2002 12:52:54 GMT

Hi Nitin,

Try this link. It may work, but you need the latest login patch on the system for this,

http://support2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000058669367

Hope this helps.

Regds

Re: restricting normal user logins

MANOJ SRIVASTAVA — Tue, 02 Jul 2002 13:08:16 GMT

Hi Nitin

There is another way too

in /etc/profile jsut add the following lines

loginid=`who am i | awk '{print $1}'`

echo $loginid
if [ $loginid ! = root ]
then
exit
fi

this will throw otu anyone who is not root.

Manoj Srivastava