Disable user account login

[Wendy_9]

Hi,

I have some accounts (eg. daemon,sys,etc) that do not need direct login access and I want to disable their login.

How can I configure it at SAM?

Thanks

Regards,
Wendy

PS. The system is trusted

[Michael Tully]

Hi,

You can use the 'deactivate' selection.
Another handy way from the command line is:

e.g.
# /usr/lbin/modprpw -k daemon

Regards
Michael

[T G Manikandan]

Just do a

#passwd -l

[ketan_5]

Wendy ,
Just insert * in passwd colums against that username in /etc/passwd. It will disable the acct. As and when you feel to reactivate remove the *. Passwd will be in encripted form in second colum.

[T G Manikandan]

sorry my command is for non -trusted systems

[Steven E. Protter]

You could add the following code to /etc/profile

if [ "$LOGNAME" = "$username" ]
echo "login not permitted"
exit 1
fi

That would do it.

You could mess with the shell settings in /etc/passwd

I would NOT do that. It could effect the functionality of those users doing the jobs they do on your system.

I have verified these users can login. But they don't have a password set.that anyone can hack or anything.

SEP

[Michael Tully]

The correct way to disable an account on a trusted system is using the two methods I've provided for you. On an 11i system have a look at the man page for 'modprpw'. It will state that using the -k options will lock or unlock a command depending on the status. The other way is 'deactivate' through SAM. The account will already have a '*' in the encryption field in the /etc/passwd file. Do not under any circumstances make any changes to the /etc/passwd file or anyway files under /tcb

[Rajeev Shukla]

To disable an account in trusted system use
/usr/lbin/modprpw -m alock=YES

This puts an admin lock on the user account and no one can login.
Also you can change other values of the tcb files of the user using modprpw, have a look at man pages which is found in 11i onwards

[Suresh Patoria]

Hi,

Try the following command. it will help u,

#passwd -l <>

Thanx

[Robert DJ]

Hi Wendy,

Using SAM.

Double click on Accounts for Users and Groups -> Local Users .

Here you can find a list of ids like daemon,sys. Select the ids you want to disable and goto action menu and do the changes you require.

Thanx & Regards,

Roby