CDE Lock Screen Option

[KapilRaj]

Hi champs,

In HP-UX 10.20 CDE, We have an option to lock the screen. Is there any way to remove that ?.

In my user's desktop, the screen lock option should not be present. Or the user should be denied the access to do that. Any of the above is okay for me...

Kaps

[Steve Steel]

HI

In the CDE advanced users and sys admin guide page 256 states:
To set system wide resources add to the file (create file if it is not
there) /etc/dt/config/C/sys.resources then the resource will be set in
each user's RESOURCE_MANAGER property at the next login.
Copy /usr/dt/config/C/sys.resources to /etc/dt/config/C/sys.resources,
then edit /etc/dt/config/C/sys.resources and add the following 2 lines:
dtsession*extension.saverTimeout: 0
dtsession*extension.lockTimeout: 0
These two settings will disable the screen saver and screen lock,
respectively. Finally, for this to take effect for users, yoi will need to remove their $HOME/.dt directories for these
changes to take effect and get copied to their new created .dt
directories.

Steve Steel

[Steve Steel]

Hi Again
you can do it without removing their .dt directory, by doing one of
the following:
1. Remove their $HOME/.dt/sessions/(current or home)/dt.resources file,
while they are logged out. Then your changes will take effect.
2. Or edit the file dt.resources and remove the following two lines:
dtsession*extension.saverList: ......
dtsession*extension.saverTimeout: .......
However, I recommend you do the first.


Steve Steel

[Gram Ludlow]

If you want to just get rid of the button itself, you should be able to edit these files:

/etc/dt/appconfig/types/C/dtwm.fp
or
/usr/dt/appconfig/types/C/dtwm.fp

Look for
CONTROL Lock
{
Blah
Blah
}

If you delete this entry, it should get rid of the button on the front panel. You may have to init 2; init 3 to see if the changes take effect.

Remember to back up the files befor editing!

[Mark Fenton]

From your post, it sounds like you want to pursue a combination of the approaches offered here:

edit the rc for the users (or replace) and edit the system files to remove the lock screen button from the control panel.

From a security standpoint, though, I question whether a user shouldn't be able to lock her or his screen. I support a healthcare management company, and much of the information that my charges deal with every day is at least sensative and ought to be protected.

If the users are causing other problems, such as leaving their terminals logged in and locked with files open and the like, that's another matter, and perhaps a program of reeducation would be appropriate.

my $0.02

[KapilRaj]

hi ,

i tried all the options except the one "/etc/dt/appconfig...../dtwm.fp . That i can try only on the late hours.

Steven , i tried editing sys.resources file but it did not work. have you tried it anytime ?.

I will get in touch with you guys within few hours, thanks for the reply.

See here my problem is , i have 10 Work stations & 20 or more users /managers . Some users just log-in , lock and go for tea or for a smock so one machine is locked .. which we can not accept. training , yes it is an option, but it all depends on the user is'nt it ?

Kaps

[Steve Steel]

Hi

This works for me.With an addition.



Problem Description

How do I disable the CDE screensaver and screen lock
for everyone?

Configuration Info

Operating System - HP-UX
Hardware System - HP9000

Solution

Use these steps:

1. cp /usr/dt/app-defaults/C/Dtstyle /etc/dt/app-defaults/C

2. Edit /etc/dt/app-defaults/C/Dtstyle and remove the word
"screen" as shown below:

Change this line:

Dtstyle*componentList: Color Font Backdrop Keyboard Mouse Beep
Screen Dtwm Startup

To:

Dtstyle*componentList: Color Font Backdrop Keyboard Mouse Beep
Dtwm Startup

Note: This change will remove the Screensaver option from the
Style manager.

3. Edit /etc/dt/config/C/sys.resources and add the following two
lines:

dtsession*extension.saverTimeout: 0
dtsession*extension.lockTimeout: 0

Note: These two settings will disable the screen saver and
screen lock, respectively.

4. To make these changes take effect for all users, remove their
$HOME/.dt directories.

NOTE

5. cd /etc/dt/appconfig/types/C

5a. vi dtwm.fp
if not found copy from
/usr/dt/appconfig/types/C

5b.Find CONTROL Lock

Comment out the PUSH_ACTION.

Then the frontpanel stays the same but the lock at Desktop level is also blocked.

Steve Steel