topic Re: disable user login in Operating System - Linux

disable user login

peterchu — Wed, 31 Mar 2004 05:13:17 GMT

our users use telnet to access our linux system , how to temporaily disable user login and only accept system administrator to telnet to the system ? thx

Re: disable user login

Karthik S S — Wed, 31 Mar 2004 05:26:57 GMT

In /etc/profile add the following lines,

user=`whoami`
if [ $user != root ]
then
exit
fi

-Karthik S S

Re: disable user login

Mark Grant — Wed, 31 Mar 2004 06:08:22 GMT

Actually, there is a simpler way.

> /etc/nologin

the Linux "login" command will only allow root to login if /etc/nologin exists.

Re: disable user login

Karthik S S — Wed, 31 Mar 2004 06:22:47 GMT

Oh .. I didn't know about that...!!

Does it apply to hp-ux as well??

-Karthik S S

Re: disable user login

Mark Grant — Wed, 31 Mar 2004 06:35:34 GMT

Karthik, Hi!

I thought it did but it doesn't look like it. You could of course, modify your code above to include a check for /etc/nologin and then it would work on HPUX too :)

Re: disable user login

Karthik S S — Wed, 31 Mar 2004 06:42:51 GMT

Hi Mark :-),

This is for you ;-)

user=`whoami`
grep $user /etc/nologin
if [ $? -eq 0 ]
then
exit
fi

/etc/nologin will contain users to be ignored.

-Karthik S S

Re: disable user login

Fred Ruffet — Wed, 31 Mar 2004 07:30:36 GMT

You could also modify user to use /bin/false as shell :
usermod -s /bin/false

Re: disable user login

Stuart Browne — Wed, 31 Mar 2004 21:59:09 GMT

What Karthik was referring too was a default on a RH system.. From '/etc/pam.d/login':

auth required /lib/security/pam_nologin.so

This rule states that if the /etc/nologin file exists, it will not allow logins at that time.

From '/usr/share/doc/pam-0.75/txts/README.pam_nologin':

This module always lets root in; it lets other users in only if the file /etc/nologin doesn't exist. In any case, if /etc/nologin exists, it's contents are displayed to the user.