Disable direct login to 'generic' application account

[rudy smith_1]

Hi, I believe this has been discussed here previously but I cant seem to find the link to the associated message. I would like to find a way to disable direct access to a particular account. What I would like to do is as follows:

have user login to user account

su to generic application account

Any assistance on this topic would be greatly appreciated.

[Jeff Schussele]

Hi Rudy,

We set up a file in /var/adm called .generic_login to hold all the generic login usernames and then add a section to /etc/profile as follows:

KEY3=`grep "${LOGNAME}" /var/adm/.generic_login`
if [ "${KEY3}" != "" ]; then
if [ "${WHO2}" = "${LOGNAME}" -a "${LOGNAME}" != "root" ]; then
if [ ! "$VUE" ]; then
echo "\007\n\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+"
echo " You cannot login as ${LOGNAME}!!!"
echo " Login as yourself and su to ${LOGNAME}."
echo "+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+"
sleep 5
exit
else
hpterm -bg black -fg yellow -bd red -bw 4 \
-fn courb14 -geometry 80x24+140+165 \
-T 'W A R N I N G' -e '/etc/vue/config/error3'
exit
fi
fi
fi

Works well.

HTH,
Jeff

[rudy smith_1]

Hi Jeff,

Thanks a bunch. We will try that.

[Jeff Schussele]

Oh & of course both those files should be 644 or tighter (444) so that the users cannot alter them.

Jeff

[rudy smith_1]

Yes, have thought of that one.

Thanks again!