User Login

[Evan Sutherland]

Is their something like securetty for standard users? reason being, we have several application user accounts which are being used by users, what I would like to do, is to force users to login with their own UID's and then su to these application accounts.

TIA

[Massimo Bianchi]

Hi,
sorry but there is no such thing for normal user.


You have many alternatives, depending ob your needs.

- lock the other account, so they will not be able to login directly

- put a check in the .profile of the users, and if they are connecting from a tty they will be pushed out. you can check this with the "tty" command output.

HTH,
Massimo

[Massimo Bianchi]

Forgot: when account is locked, they can only use "su", like you want.

Massimo

[James A. Donovan]

You can use the sudo utility to enforce this kind of thing.

Downloadable from http://hpux.cs.utah.edu

[Umapathy S]

Evan,
who -m returns the username which was originally logged in. Add this to .profile of the account which you want to bar/not directly login for example oracle.

us=`who -m|awk '{ print $1 }'`
echo user is $us
if [ "$us" = "oracle" ]; then
exit
fi

But the problem here is, the users can see the .profile of oracle and can edit the profile. May be try adding this to /etc/profile. I am yet to test that.

HTH,
Umapathy

[Massimo Bianchi]

Hi,
i suggest not to to the change in /etc/profile,
because there may be cases (example root) in which you want always to have the proper profile running, in every case, even on single user.


It's better to put it in the users profile, and change ownership so that users cannot modiify it.

HTH,
Massimo