Account restrictions question(s):

[john guardian]

1. What options are available to restrict the use of a non-privileged user account?

2. Can a non-privileged user account be denied remote login, but still allowed local login via a local console?

3. Can a non-privileged user account be denied both remote and local login, but allow the account to remain UNLOCKED to permit another user the ability to SU to the account?

4. What account restriction options [From Question #1] would prevent or affect the use of CRON and AT jobs created and executed by the non-privileged user account?

[OldSchool]

1. What options are available to restrict the use of a non-privileged user account?

I'm not sure what the above means regarding "restrict the use"? Limit times, locations, actions, all of the above, none?


2. Can a non-privileged user account be denied remote login, but still allowed local login via a local console?

I know of nothing "built-in" that will do this (which doesn't mean much), but you could do something the the profiles to examine where the login is coming from and react accordingly.


3. Can a non-privileged user account be denied both remote and local login, but allow the account to remain UNLOCKED to permit another user the ability to SU to the account?

Yes. Other options might include sudo, powerbroker, role based access controls, or ????


4. What account restriction options [From Question #1] would prevent or affect the use of CRON and AT jobs created and executed by the non-privileged user account?

see the man pages for "cron" and "at", "cron.deny", "at.deny", "cron.allow" and "at.allow"


Perhaps description of what you hope to accomplish might be in order

[john guardian]

1. What options are available to restrict the use of a non-privileged user account?

I'm not sure what the above means regarding "restrict the use"? Limit times, locations, actions, all of the above, none?

Restrict the use means restrict the user from accessing, so "all of the above".

[Patrick Wallek]

>>1. What options are available to restrict the use of a non-privileged user account?

-delete the user
-lock the user
-change the password to some unknown/invalid password
-change the default shell to an invalid shell

Perhaps it would help if you explained what the user should be able to do.

[OldSchool]

> "Restrict the use means restrict the user from accessing, so "all of the above"."
>

OK, let's try again.....

using the same word your attempting to define, in this case "restrict", to define itself, doesn't help much...

should the "restricted" user every be able to login? should he/she only be able to do certain things?

I know YOU know what you mean, but it certainly isn't obvious from the "outside looking in".

You're probably going to need to eihter:

a) state, exactly, what limitations you wish to place on said user, -or-

b) enumerate what they should be able to do.....