Restrict login to a user

[Daniel Ubeda]

Hi,

how can I do to restrict a user login ???
I put nologin in /etc/passwd, but I can't do a su to this user ....

thanks

[Cheryl Griffin · Accepted solution]

If you are trying to restrict login but all su for the user, add the following to your /etc/profile:

name=`logname`
if [ $name = username ]
then
echo $name must use su. no login allowed.
exit
fi
#end

where you replace username with the user you are trying to restrict.
Cheryl

[MANOJ SRIVASTAVA]

Hi Daniel


What we do is to restrict diorect logins of SA's and DBA's , we add the following in /etc/profile


loginid=`who am i | awk '{print $1}'`

echo $loginid
if [ $loginid = oracle ]
then
exit
fi

echo $loginid
if [ $loginid = root ]
then
exit
fi
and that way the user don directly log in , and su collects the log.



Manoj Srivastava

[James R. Ferguson]

Hi Daniel:

Are you thinking of the '/etc/nologin' file and the 'nologin' token in 'etc/default/security'? If so, see 'man (4) security'.

Regards!

...JRF...

[Daniel Ubeda]

Thanks to all, I have resolved my problem !!!

James: I don't know the "/etc/nologin" I no find it in man.

[James R. Ferguson]

Hi (again):

The man pages I referenced are the 11.11 ones. See 'man 4 security' here:

http://docs.hp.com/hpux/onlinedocs/B2355-90696/B2355-90696.html

For 11.0 you need patches PHCO_25590 & PHCO_26089.

For 11.11 PHCO_24839 and PHCO_25526 provide current patches.

Regards!

...JRF...

[Daniel Ubeda]

Ok, thank you very much !!