Restricting User Access

[Suren Selva_1]

Hello Everyone,

We have an application (Beckman LIMS) which runs in HP-UX 11.11. The users connect via a Citrix server using rexec. We have disabled access to the login prompt for security reasons using the following commands in the .profile:

if [ `tty | grep -i dev` != "" ]
then
exit
fi

A tty is needed for password changes. Any ideas on how these two conditions can be fulfilled?

Thanks to all those who respond.

Regards,
Suren Selva

[Alexander M. Ermes]

Hi there.
What about a password script entered in your .profile ?

if [ `tty | grep -i dev` != "" ]
then
Echo "Pls enter new password or cancel with Ctrl-C"
sleep 2
if [ $passwd ="^C" ]
then exit
else
passwd
fi
exit
fi

or something like this.
This was just nailed into the machine within a few seconds to show you a way.
Rgds
Alexander M. Ermes

[Suren Selva_1]

The application itself changes the password using its own functions. We don't have to supply a script for that.

Is there any other way of restricting the login prompt?

-Suren

[Zigor Buruaga]

Hi,

Check this, it seems is what you are looking for.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x8aa699ad850ec24399404bd9506be647,00.html

Hope this helps.
Regards,
Zigor

[Steve Steel]

Hi

1)I do not believe that rexec accesses the .profile

2)put as last line of .profile exit

Then anyone who tries to login logs out again


Steve Steel