direct login not allowed

[Mark Philip L. Castro]

We have an account which does not allow direct login. Meaning, if you telnet or login using the account, it will be disconnected after 10 seconds. "su" is the only way to use the account. How will I allow direct login for this account?

[Michael Tully]

First, check the account line in the passwd file. (/etc/passwd) for an '*' for where the password is. When you 'su' do you use a password? Is the account 'root' ?

[Sanjiv Sharma_1]

Hi Mark,

Please check these links:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=440270
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=469590
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=68020

hth.

[Mark Philip L. Castro]

The account is not root. I use a password to "su". With regards to /etc/passwd, there is an encrypted password after the accountname. "*" is not present. Thanks.

[Michael Tully]

ok ... Is there an entry in the /etc/profile where there is an evaluation of accounts or makes reference to a file. I've seen many times where this has been used to prevent people logging in. This file may contain certain user accounts. (Are there any other accounts that you know of that also have this problem?

[Mark Philip L. Castro]

No account referencing in /etc/profile. No other file also referenced. It is for this account only. Thanks.

[Naveej.K.A]

hi,

any variable called TMOUT set in .profile of the user?? Check this!!!

How do you su to the user account??
su - username or su username?

when you do an su username, the system and the user startup file are not executed (/etc/profile and $HOME/.profile) but in the other case, they will be executed.

Possibly this could be your issue..

With best wishes
Naveej

[KapilRaj]

By the way, are you by any means using ssh ?? (Port :22) .. It just look like your telnet when u access from a client (putty !). In SSH you may have a configuration not allowing a set of users to login directly.

We use it for root and application batch ids so that technical users (including me ) have to login with their personal ids and then an "su".

Kaps