Having operators log directly into restricted SAM

[Eric Kaiser]

I am trying to have users log directly into a restricted sam. I tried to have the last entry in the .profile call a script that pulls up a menu asking the user to go into SAM or exit completely off the system, even with an exec statement. Additionally I am trapping all break outs as well. It seems that when the user logs off, my exit doesnt get them completely off the system. Its breaking them down to the command line which I dont want. Any suggestions???

Thanks!

[melvyn burnard]

In the password file, change the command to be run from /usr/bin/sh to /usr/sbin/sam

and make sure you supply ONLY what you want them to do in the restricted SAM

HTH

[Eric Kaiser]

Thanks, but I think my prblem is my emulation software (Reflections X or Unix & Digital ). Its not echoing back the display. I tried that as well what you wrote... UUGGHH!!

[Robert Gamble]

You many want to write a script that execute upon their login.

Inside the script, determine the IP from where they are connecting from using 'who -a' and use awk to get the seventh field. Then add the '0:0' to result and then declare that your $DISPLAY.

Good Luck!

[Eric Kaiser]

Rob,
Thanks, but I already do have a acript like that in place and again I think the problem is with my terminal software the operators use to login. Refrections X. Within Digital its fine, but any gui it cant interpet. Even with the echo DISPLAY back. Still stuck. :(
Thanks

Eric

[Holger Knoppik]

Hi Eric!
Maybe you want to work with PPID of the users shell ? I tried to monitor user commands by "script", and checked the PPID. When you say "exit", just the script process dies, but by terminating the PPID, the user will be kicked off immediately. Damn, i cannot get the script right now, but i'll be back!
Hope this helps a bit
RGDS, Holger

[Holger Knoppik]

Hi again, Eric.
For the user's profile: change ownership: root:sys, the perms 444 are OK. In the profile add: /<script_you_want_to_be_executed>
In the script: The last line should be "kill -9 $PPID. I also ran into problems by using the graphical stuff, but i hope this helps a bit.
RGDS, Holger

[Peter Kloetgen]

Hi Eric,

you can simply use the normal login shell for your users, and take care that they have a file:

.shrc or .kshrc or .cshrc (depending on the used shell)

you have to edit this file:

put these two lines at the end of file:

/usr/bin/sam
exit

So if they stop their sam, they will be automatically kicked of after. I like these two lines!

Allways stay on the bright side of life!

Peter

[Eric Kaiser]

Guys, Thanks for the info, but I think my problem might still be with the export of the display thru the terminal client. I have tried everything you guys said before with no avail. I guess I will keep poking away at it...