disable login

[O'lnes]

If i need to run the maint. job on the system, how to temparory disable users login to the system?

[Jean-Luc Oudart · Accepted solution]

One way is to put your own IP address in the inetd.sec . Therefore only your workstation will be granted acees to the server (and the console too).

man inetd.sec

Jean-Luc

[T G Manikandan]

#passwd -l

[Robert-Jan Goossens]

You can also make a passwd file for maint.purpose

passwd.maint
passwd.org
passwd

Regards

RJ.

[David Lodge]

All depends on how you've set up your system, but one quick way which may doesn't need mangling of /etc/passwd is just to disable inetd!

You can also stop people logging in (except for root) by using:
# touch /etc/nologin

But this only blocks users who come in via a process that uses /usr/bin/login (eg telnet/rlogin)

[U.SivaKumar_2]

Hi,
Give a broadcast message about your decision,
#wall

Then.
#init s
Gone to single user mode
DO your works.
When done,
#init 5
Go to multi-user mode.

regards,
U.SivaKumar

[O'lnes]

how should i do if i don't have the file inetd.sec?

[Robert-Jan Goossens]

David,

You are quit right forgot the /etc/nologin, the easy way.

Robert-Jan.

[David Lodge]

If you don't have an /etc/inetd.sec - just make one... the file format is in the manual page; essentially:



eg:

telnet allow adminsrv foo
telnet deny *

should do it...

[Jean-Luc Oudart]

If you need more info you can run a search on inetd.sec.

among them :
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x918a107d277ad611abdb0090277a778c,00.html
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x70db0bce6f33d6118fff0090279cd0f9,00.html

Enjoy
Jean-Luc

[Elif Gius]

Hi,

We use ssh...then it is quit easy to disable user login... just change the sshd_config from
+++
AllowUsers root operator userA
+++
to
+++
AllowUsers root
+++
and then restart the ssd daemon...maybe it is useful for the future

Bye
Elif

[Paula J Frazer-Campbell]

Hi

If you are working at the console you can pull the network cable.

Paula

[Bill Hassell]

/etc/nologin does not function prior to 11.0 (ie, 10.20) and does not work if you are not up to date on security patches.

NOTE: /etc/nologin prevents new users from logging in but does nothing to current users and nothing to applications that are running. You would be better off changing to single user mode with a shutdown and interactive reboot into single user mode. That guarentees no users can login and no applications will run.

[doug hosking]

Also note that if you want to use /etc/nologin,
you must be sure /etc/default/security has a line 'NOLOGIN=1' in it. Otherwise, HP-UX will not honor the presence of /etc/nologin.
(The /etc/default/security entry can be set once and left enabled all the time, with /etc/nologin created/deleted as needed.)

[Ranjith_5]

Hi Brian,

Easiest and Safest way is :

#>/etc/nologin OR
#touch /etc/nologin

After this kill all the users currently logged in to the system.They wont be able to login further.

Regards,
Syam