Disable Screen Saver and Screen Lock

[sai.prashant]

Hello All,
How can i disable the Screen Saver and Screen Lock on the HP Systems for all the Users. As we work in shifts these are creating the problems, for which i have to supply the root password for other users every time .

Thanks,
Sai

[harry d brown jr]

Screen savers on what? PC's? Xterms? Consoles? remote consoles?

If you are referring to the console then I would suggest you look into other access methods for operators as the only person that should EVER use the console is a systems administrator. This means NO non-systems administration jobs should ever be run from the console.

If you are talking about PC's running M$, then you have about 1000 choices to implement the disabling of screen savers/locks.

And of course rule number 1 is that NO user should be logged into root. Only QUALIFIED system administrators!

If you are responsible for systems of US publicly held companies then access to root should be severely limited and extremely audited (thanks to the sarbane-oxley crap - I mean act)

live free or die
harry

[sai.prashant]

Correction in the Question?....
How can i disable the Screen Lock on the HP-Unix Systems for all the Users in NIS. As we work in shifts these are creating the problems, for which i have to supply the root password for other users every time .

Thanks,
Sai

[Hoefnix]

Hi,

I am not sure if this will do the trick and it's a dirty one.
Try to rename the binairy /usr/dt/bin/dtscreen to something else /usr/dt/bin/_dtscreen.

You will have to test if it also disables the locking and also how much error message you are getting from this action.

HTH,
Peter

Ps. xset has some option for one Xsession but users can disable the defaults you can set for them.

[Pete Randall]

Sai,

I'll assume you're talking about the CDE screen saver.

On an individual basis, each user can disable the screen saver by going into the CDE Style Manager (it's the artist's pallette icon on the CDE front panel), clicking on "Screen", and selecting "Screen Saver: Off" and "Screen Lock: Off".

To do this on a global basis for all users, I would suggest doing it for one user and observing the changes in the user's ~/.dt directory. Whichever front panel file gets changed in the .dt directory to record this change would then need to be copied to all other users home directories, perhaps with a for loop or something.

You could also customize the CDE front panel to eliminate the Style Manager or customize the Style Manager to eliminate the Screen section entirely, but that's a whole other question.


Pete

[john kingsley]

If you haven't started customizing CDE yet, copy /usr/dt/config/C/sys.resources to /etc/dt/config/C/sys.resources. The following variables control the screensaver:
dtsession*saverTimeout: 10
dtsession*saverlockTimeout: 10
dtsession*cycleTimeout: 3
dtsession*saverList: StartDtscreenBlank

Try setting dtsession*saverlockTimeout to a very large number. The changes will set the defaults for all CDE logins, but the users are still able to overide these settings in their ~/.dt directory. You'll have to have those users changer their settings by hand.

[Rick Garland]

If the users are having their screens lock, they should not need the root passwd to unlock. The passwd supplied is the respective users passwd on that tty. If they are logged in as root, then you will need the root passwd. Again, nobody should be logging as root anyway (excepth qualified SYSADM). Logging in as root on a tty can be said to be a "no-no". As a matter of opinion, direct root logins should only be on console and the console should be in a secure data center in which users do not have access.

[sai.prashant]

Thankyou everyone,
But i am still unable to stop them from locking the Screen. The users are able to do it using Lock Icon displayed on the Front Panel.

Sai

[Gerard Leclercq]

Hello,

Can't you try the gnome desktop ?

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6857BA

It is more modern and a lot more flexible.

Gerard