topic Re: limit user login in Operating System - HP-UX

limit user login

Vogra — Mon, 08 Jul 2002 14:32:29 GMT

Hi All!
we use Baan ERP on UX11.00. Each login (on Baan) generate one user process (called bshell). From Baan, we can't limit number of user login for specific user.
We can try to limit number of user login, limiting number of bshell process that exist on UNIX.
How can I limit number of user login using - for example - script shell?
Thanx.

Re: limit user login

Nick Wickens — Mon, 08 Jul 2002 14:40:24 GMT

Hi I limit logins by adding the number of logins permitted into the message area (field 5) of the /etc/passwd entries for each user (our field r looks like this - Doug Green,Mr,IT_TEAM,5 so this user is limited to 5 ksh sessions).

I then added the following to a seperate profile called by the initial login profile.

USER=$(whoami)
echo $USER|egrep -q '(informix|dba)'
if [ ! $? -eq 0 ]
then
trap "exec exit" INT
TMPLOG=/tmp/login_limit.tmp
DATE=$(date)
LIMIT=$(grep ^$USER: /etc/passwd|cut -d":" -f5|cut -d"," -f4)
COUNT=$(ps -fu"$USER"|grep "$USER"|grep "\-ksh"|grep -v grep|wc -l)
if [ $LIMIT -o $LIMIT -ne 0 ]
then
if [ $COUNT -gt $LIMIT ]
then
echo "Sorry you are only allowed $LIMIT session(s) - Press Enter \c"
read NOTHING
echo "$DATE - $USER with $COUNT shells active tried to exceed $LIMIT ses
sions" >> $TMPLOG
ps -fu"$USER"|grep "$USER"|grep -v grep >> $TMPLOG
exit
fi
fi
fi

Re: limit user login

RAC_1 — Mon, 08 Jul 2002 14:43:30 GMT

Check the following

Put the following code in /etc/profile(at the end)
user_name=`who -u |grep "your_user_name"`

if [$LOGNAME = $user_name]
exit 0
fi

What I am doing with above code is checking exisinting login and if it matches with incming login it will logout.

Regards,

Re: limit user login

Vogra — Mon, 08 Jul 2002 14:52:46 GMT

Nick and Anil,

The users don't execute /etc/profile or .profile.
The users connect on Baan from WIN95 clients that connect to Baan on Unix and in it, check the /etc/passwd.

Re: limit user login

MANOJ SRIVASTAVA — Mon, 08 Jul 2002 15:04:27 GMT

Hi Claudio

This is what can be done:

edit /etc/profile

and put this lines in there:

loginid=`who am i | awk '{print $1}'`
export B=`who | grep loginid | wc -l`
if [ $B -gt 5 ]
then
exit
fi

this will allow only 5 users to login with that id.

Manoj Srivastava

Re: limit user login

RAC_1 — Mon, 08 Jul 2002 15:11:40 GMT

do while true
bann_count=`ps -ef|grep [b]shell|awk '{print $2}'`

bann_count2=ps -ef|grep [b]shell|awk '{print $2}'` > /tmp/bann.test

kill -15 `cat /tmp/bann.test|grep -v $bann_count`
sleep 5
done

Keep the above code in a file and keep it running.

This puts the pid of first bshell in a variable and then keeps on checking if other bshells are coming and if gets it puts pids in file and finally kills all bshells except the first one-saved in bann_count variable.

Regards,

Re: limit user login

kevin leong — Thu, 30 Jun 2005 03:25:36 GMT

Hi Manoj ,
I trying used your scripts and put in to /etc/profile at last line .And I try login again ,giving a syntax error .

You have mail.
/etc/profile[132]:Syntax error:`&' is not expected .

Please advice me how to slove it

Thanks
Leongko

Re: limit user login

Muthukumar_5 — Thu, 30 Jun 2005 07:02:19 GMT

You can try do it simply as,

MAX_LOGIN=5
if [[ $(who | grep $LOGNAME | wc -l) -gt $MAX_LOGIN ]]
then

echo "User $LOGNAME: Login Limit $MAX_LOGIN is over. Try after some time"
sleep 1
exit 1
fi

hth.

Re: limit user login

Muthukumar_5 — Thu, 30 Jun 2005 07:03:30 GMT

Put the above script in /etc/profile file to control globally.

hth.