Restrict login per user ID

[Robin_45]

My system HP-UX os version is 11i and trusted system I would like to restrict login per user ID. For that I have created a file security under /etc/default with the following command

Vi /etc/default/security

Add the following line and save the file.

NUMBER_OF_LOGINS_ALLOWED=2

Chmod 644 /etc/default/security (put the permission like this)


But the problem is still user can login more than 2 session at a time as a matter of fact it It is still unlimited. Do I miss some things ?

Please help me regarding this issue.

[rajdev]

Hi Robin,

Are you using telnet/ssh/rlogin ....

check if you have this patch
PHCO_33758 or PHCO_27694

Regards,
RD

[Robin_45]

Dear Rajdev,

Thanks for your mail we are using ssh for remote login.

Patch PHCO_27694 is install but PHCO_33758 is not install.


Robin

[whiteknight · Accepted solution]

Hi Robin,

For ssh to acknowledge the NUMBER_OF_LOGINS_ALLOWED parameter,
it is necessary to modify the /opt/ssh/etc/sshd_config file to
set "UseLogin yes". This step requires the following patch:

PHCO_27694 s700_800 11.11 login(1) cumulative patch


WK

[Robin_45]

Dear WK
Required patch is installed in the server and i have changed the /opt/ssh/etc/sshd_config file to
set "UseLogin yes".

but still the result is same, user can login unlimited session.

Please let me further to resolve this issue

Robin

Th swlist -l patch PHCO_27694
# Initializing...
# Contacting target "blbiltst"...
#
# Target: blbiltst:/
#

# PHCO_27694 1.0 login(1) cumulative patch
# PHCO_27694.UX-CORE 1.0 OS-Core.UX-CORE applied

[Robin_45]

Dear all

For your information when I use telnet instead of ssh for remote login then it works according to â WKâ I have change some entry in /opt/ssh/etc/sshd_config to
â UseLogin yesâ but still it is not working.

I believe some things more must configure in ssh then it might work.



Robin

[Anshumali]

though not important at this point, I hope u didn't miss the
/sbin/init.d/secsh stop
/sbin/init.d/secsh start

;)
Anshu

[Robin_45]

Thanks every body, now its working actualy after change(accroding to WK) in /opt/ssh/etc/sshd_config file I forgot to restart the ssh daemon. Howerver thanks again every body


Robin