1833491 Members
2885 Online
110052 Solutions
New Discussion

Security setting in HPUX

 
Clement Yeo
Advisor

Security setting in HPUX

Hi all,
like to find out how to restrict user from concurrently login to more then 1 terminal.

Tried setting in "/etc/default/security" with parms "NUMBER_OF_LOGINS_ALLOWED=1" but did not work.

Please help!!
9 REPLIES 9
KapilRaj
Honored Contributor

Re: Security setting in HPUX

In the .profile add the line

who -u |grep $USER && exit 0

Kaps
Nothing is impossible
Sridhar Bhaskarla
Honored Contributor

Re: Security setting in HPUX

Hi,

The option to use securify file is not available for 10.20 and by default on 11.0 but is available by default on 11i. For 11.0 systems, you will need to install a patch.

I suggest you install the latest available 'login' patch.

Go to itrc web site and search for login in the patches URL.

-Sri
You may be disappointed if you fail, but you are doomed if you don't try
Sridhar Bhaskarla
Honored Contributor

Re: Security setting in HPUX

Hi (Again),

One crude way of checking to see if your system allows the use of /etc/default/security is to do

$strings /usr/bin/login |grep -i number_of_logins_allowed

and see if it displays this string.

-Sri
You may be disappointed if you fail, but you are doomed if you don't try
Clement Yeo
Advisor

Re: Security setting in HPUX

Yes, the string appears. What next?
Sanjay Kumar Suri
Honored Contributor

Re: Security setting in HPUX

Edit/create the following line

NUMBER_OF_LOGINS_ALLOWED=1

in the file /etc/default/security

owner & group=bin.

sks
A rigid mind is very sure, but often wrong. A flexible mind is generally unsure, but often right.
Clement Yeo
Advisor

Re: Security setting in HPUX

Sorry I've forgot to mention that it only work for telnet session but not for those sessions by ssh. How??
Sanjay Kumar Suri
Honored Contributor

Re: Security setting in HPUX

NUMBER_OF_LOGINS_ALLOWED is applicable only for non-root users and only for services which use the "login" binary for authentication.

sks
A rigid mind is very sure, but often wrong. A flexible mind is generally unsure, but often right.
Gary L. Paveza, Jr.
Trusted Contributor

Re: Security setting in HPUX

The latest version of SSH is supposed to honor settings in /etc/dfault/security. What version of ssh are you running? Current release is A.03.71.000.
Sridhar Bhaskarla
Honored Contributor

Re: Security setting in HPUX

Hi,

By default "useLogin" feature of sshd would be off. So, edit sshd_config file and enable that option and restart your sshd process.

-Sri
You may be disappointed if you fail, but you are doomed if you don't try