Password restriciton

[mvr]

Hello

I need to restrict users to login in to HP-UX 11.00 only once. We can not convert in to trusted system (problems with the BAAN aplication).
Is that possible ?

Miro

[Pete Randall · Accepted solution]

In 11.0, you can create a file called /etc/default/security and place an entry in it thusly:

NUMBER_OF_LOGINS_ALLOWED=N

where N number of logins are allowed per user.

The /etc/default/security functionality (I think) was introduced into 11.0 via a patch(es), possibly PHCO_25590 and PHCO_26089. If I can find a definitive reference, I'll post it.

Pete

[Pete Randall]

Miro,

Bill Hassell's comments in this thread:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x0c8b8cc5e03fd6118fff0090279cd0f9,00.html

seem to definitely identify PHCO_26089 (or newer).

Pete

[Jose Mosquera]

Hi,

NUMBER_OF_LOGINS_ALLOWED=3 in the file /etc/default/security.

But it doesn't limit users whose usernames are 8 charachters long, to solve this aplly the following patches:

HP-UX 11.11: PHCO_27694
HP-UX 11.00: PHCO_27721

Rgds.

[mvr]

Could I restrict on this way, a group as well, or just a some users ?

Miro

[Jose Mosquera]

Hi,

Other way could be include in /etc/profile file followings lines:

case $LOGNAME in
do
user1|user2|user3|user4)
MAX=3 #Login limit
CURRENT=`who|grep $LOGNAME|wc -l`
if [ $CURRENT -gt $MAX ]
then
echo "Your Message.."
exit
fi
;;
esac