How to Disable Screen Lock (HP-UX 10.20)

[Kong Kian Chay]

Problem : How to stop users from locking screen

Steps already taken
--------------------
1) vi /etc/dt/app-defaults/C/Dtstyle
--> remove the "Screen" control icon fr Style Mgr

2) vi /etc/dt/config/C/sys.resources

dtsession*extension.saverTimeout: 0
dtsession*extension.lockTimeout: 0

3) DELETE /usr/dt/bin/dtscreen
chmod 400 /usr/dt/bin/dtstyle

4) For every users found locking screen subsequently,
DELETE $HOME/.dt

However, SAME users still able to find ways of locking screen.

Also attached a "ps -ef" of one of those who locked screen before I used root password to unlock the screen & delete ".dt" from its home-dir.

[Rita C Workman]

From what I've read, you have taken all the steps to stop someone from locking the screen.
And you have already identified which users are doing it. Obviously, locking the screen is a problem for you...others may have some better ideas; but I suppose you could write a script (since you know who..) to periodically check for these users, then check and see if they have put it back...and if they have, run the steps to remove it. It would be a bit of a pain to do it...but once done, you could cron it often enough to make there attempts to reset it...void.
All I could think of, others may have something better.

[Alex Glennie]

I suspect the answer is simple .... check the padlock icon on CDE's front panel ..... if you users can get to it then there goes all your hard work >

Why not remove it from the CDE front panel altogether,
then blow away their resources in their $HOME/.dt dirs together with access to the dtstyle screen settings .... that should do the trick ?

I'd take a look at the front panel deinition file ...shoul be able to just comment the icon bits out of either their dtwm.fp or the system wide one
Or consider removing their fingers ;)

[Kong Kian Chay]

Alex

The padlock icon on the CDE Front Panel has also been removed long ago - the very 1st thing that we do. Note also that I have also performed a "chmod 400 /usr/dt/bin/dtstyle" -- normal has no access to "dtstyle" program at all.

Is it possible to give more details on the "dtwmfp" ? The contents of one of the "errant" users for "dtwmfp.session" is simply :
0
0
0
1

I also attached a tar file of the ".dt" subdir of one of this users for whoever can help me scan thru.

One of the users has also been kind enough to tell me that ONE of the method that they used to lock screen is --
- goto an SGI or Digital Workstation in another bldg hooked up to our System which has no "NO Screen-Lock Policy"
-- invoke screen lock from there so that it is stored into their Home-Dir (we use NFS Home-Dir)
-- come to our Centre & use our HP Workstations.

Anybody can suggest anything on the HP WOrkstations other than those steps which I have already taken to STOP Screen-Locking ?

[Kong Kian Chay]

Alex

Sorry, also would like to add that each time I found a user locking screen, I would login using root password and then "rm -rf .dt" from their Home-Dir using root.

But the SAME users are still able to lock-screen subsequently & this popn is growing as they pass the secrets to one another. We are dealing with IT-savvy undergrads & postgrads.

[Alex Glennie]

I was looking for the exact details yesterday, I found them this morning :

You can disable stylemanager Screen settings to users by editting

Dtstyle*componentList: in /etc/dt/app-defaults/C/Dtstyle

also Padlock screenlock icon on front panel disabled by editting :

CONTROL Lock Action def in /usr/dt/appconfig/types/C/dtwm.fp

Lastly Edit /etc/dt/config/C/sys.resources and add the following :
dtsession*extension.lockTimeout: 0

To get it to take effect for all users, you will need to remove their $HOME/.dt directories for these changes to take effect.

still leaves xset command lets hope they don't read man pages ;)

[Kong Kian Chay]

Alex

All the above steps were already done more than 6 months ago. I double-checked again yesterday on all workstations.

I am currently looking at "xset". But I doubt it helps judging from the output of "xset -q" on that few workstations I sampled -- screen saver was already disabled and I don't see any screen lock option at all.

[Jitendra_1]

try checking and killing the xlock or xautolock process periodically through a cron job.