Restricting No Of Users

[donne007]

Hi,
I want to Restrict my Hp9000 Box to a specific No of People(ie 50 ) to Access. How do i Restrict the no of users without recfging the Kernel, , If it's possible how do i find the No of Users Logged in and Kill the Users-logins exceeding the Specific No.

Thanks In ADvance
Asif

[Michael Tully]

One of the best ways is actually limit the number of psuedo ttys that are available.

The kernel parameters for this are:

npty
nstrpty
nstrtel
These are for HPUX 11.
The default in the kernel is 60.

[Michael Tully]

There is another way to do this. You could generate a script that looks at the number of users on the system. When that number has been reached, a file is created. When the next user attempts to login, the /etc/profile will make reference to it and give a nice message to the user "System Usage at peak, try again later" terminating the session.

[harry d brown jr]

I like Michaels method better - the script/.profile idea because it allows you to get creative and changes won't require a reboot - those kernel parameters will force a reboot.

Plus, with a script/.profile, you could "always" allow certain CRITAL users access to the system, or even a "GROUP" of users.

live free or die
harry

[Niraj Kumar Verma]

Hi,


hey if you want to restrict specific 50 login id's you can use the script below.

careate a list of 50 login Id's in /etc/Login_Allowed

# vi /etc/Login_Allowed

:root:
:user1:
:user2:

Put this script into your /etc/profile

===================================
#!/bin/sh

Access_List=/etc/Login_allowed
Login_Name=`/usr/bin/logname`


if [ -f /etc/Login_allowed ]
then

Allowed=`grep ":$(logname):" /etc/Login_allowed | awk -F":" '{print $2}'`


if [ "_$Login_Name" != "_$Allowed" ]
then
echo " You are not authorise !"
exit 0
else
echo " Login Sucessfull !!"
fi
fi


===================================

-Niraj

[Chris Wong]

In addition, you can use the NUMBER_OF_LOGINS_ALLOWED parameter in the /etc/default/security file (man 4 security) to force no concurrent sessions. (root is exempt).

- Chris

[Thomas M. Williams_1]

In regards to Chris' suggestion, how does "/etc/default/security" concurrent logins work? I do not have man page.

[Shannon Petry]

I believe that the concurrant logins is part of the HP secure system, and not standard.

Another easy way to accomplish this is by adding this line to /etc/profile
set -i
LOGGED_IN=`who | wc -l`
if [ ${LOGGED_IN} -gt 50 ] ; then
echo "System limit of 50 users reached. Contact System Adminstrator for help"
exit 0
fi

Regards,
Shannon

[Bill Hassell]

The man page for security is missing for 11.0 and non-functional if you don't have the latest security patches. It does not require a Trusted system for every option to work (PASSWORD_HISTORY_DEPTH does require a Trusted system). The man page exists for 11.11 and can be viewed at docs.hp.com (search for /etc/default/security). The man pages at docs.hp.com (and 1i) are still not quite complete. If you check itrc.hp.com for security patches (look for libpam) you can see the other options that have been added. You'll need to have PHCO_26089 (or replacement if superceeded) for 11.0.

Note that there is no code for /etc/default/security in the obsolete 10.20 version of HP-UX.

[Theresa Patrie]

The "who" command by itself will give you an inflated number of users because if a user has more than one tty open, it will get reported and counted in the list. If you have 5 users logged in and each has 5 windows open, you'd get a count of 25 users! You'd have to add to your script to strip out duplicate names.