Restricted user access !

[titu]

if user to login on their own account such as user x.
After logging in to user x account, the user can then su to another account user y .
But I do not want users to be able to log in directly to account user y .

Thanks in advance

titu

[Dennis Handly]

I'm not clear, you don't want them to login to user y but you want them to be able to use su(1)?

[Analyst]

Hi Titu,

1.Check for the users permissions.
2.Any how SU- switch user if you login from lowest shell ,it asks for the password .


Thanks,
Analyst.

[Mark McDonald_2]

You could change the password of user y so only you know it, then give user x sudo access to change user y.

[titu]

Let me give an example :
Example:
user x logs in to account user x, then su - database

however, if user_1 attempts to log in directly to account database it will not be allowed.

Can we check with ACL in this case ?

thanks in advance

titu

[Ivan Krastev]

You can use /etc/profile to restrict direct logging. See more here - http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1029641


regards,
ivan

[Mark McDonald_2]

>>>You could change the password of user y so only you know it, then give user x sudo access to change user y.

Just thought - once he has switched to user y he will be able to change the password.