no home no access

[tenon_2]

hi,

i've got a little soucy :
i would like to know how i can deny access to a real nis user if there is no user home directory ?

thank you

[Robert-Jan Goossens]

Hi Tenon,

You could remove him from the passwd file.

Regards,
Robert-Jan

[tenon_2]

hi back,

hum ! good answer for my stupid question ... but i explain what i wanted to say :
i've a nis server for 4 hpux and i would like to accept access just for 1 or 2 or ... hpux because i don't want any people on any hpux (because each hpux are specific (abacus, fortran, marc ...)
and i was thinking if a user didn't have a home directory -> no access
so i just have to create home directory to give access for a specific station... crazy or not ?

thank you

[Robert-Jan Goossens]

Ok,

Lets say we have three servers.

hp01 - nis master
passwd file user
gorj:tyf2EuWEo:104:20:Robert-Jan,,,:/home/robert:/usr/bin/ksh
tenon:OawEuWEo:105:20:Tenon,,,:/home/tenon:/usr/bin/ksh

hp02 app server nis client
you only like to give access to tenon
passwd file
+tenon

hp03 app2 server nis client
all users (2) can access this server
passwd file
+tenon
+robert

Is this an answer to your question ?

Robert-Jan

[tenon_2]

hi 'll be back


good answer ... i understand that i need to remind me nis documentation ...

last question but not so important

how can i deny access for someone on my nis server and give access for the other hpux station ... it's the same ?

#nis server /etc/passwd
tenon:nfaknjfks
-tenon
# other hpux station & nis client
+tenon

is it good ????

NB: realy thank you
because you remind me that i'm litle player ;)

[Robert-Jan Goossens]

Hi Tenon,

I don't think that is possible.

the + is a nis client option not a nis server option.

Best regards,
Robert-Jan

[Robert-Jan Goossens]

Check this doc for more information.

http://www.docs.hp.com/en/B1031-90043/ch04.html

If you have more questions, don't hesitate asking them :-)

Best regards,
Robert-Jan

[Gordon Morrison]

See "man security"
There's a setting called "ABORT_LOGIN_ON_MISSING_HOMEDIR"

[Victor Fridyev]

Hi,

You can use groups for this. Create groups fortran, abacus etc and check the user's group in /etc/profile.
See an example: only users belonging to 223 and 277 may log in
UID=$(/usr/bin/id -u $LOGNAME)
if [ $UID -gt 30 ]; then
FLEX=0
GRP_LIST="223 277"
for ugroup in $(id -G); do
for grp in $GRP_LIST; do
if [ $ugroup -eq $grp ]; then
FLEX=1
break 2
fi
done
done
if [ $FLEX -eq 0 ]; then
exit
fi
fi

HTH