Sponsored Content
Operating Systems Solaris How can i prevent logging user1 from console? Post 302705423 by jlliagre on Monday 24th of September 2012 09:14:36 PM
Old 09-24-2012
@Corona688: /usr/bin/false makes su useless. su is invoking the target user's shell after a successful login, thus su kind of succeeds but exits immediately.

Quote:
Originally Posted by maxim42
do u have another method ?
Here is one that works:
Make user1 a role and grant it to user2:
Code:
usermod -K type=role user1
usermod -R user1 user2

No direct login as user1 will be allowed.
Only root and user2 will be allowed to su to user1.
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Logging all console activity to a file - how?

Hi all, Well I've had a bit more experience with Unix-like environments since my last post, now that I have started working on my website in earnest and am doing much of the file manipulation via the command line through SSH. The thing is, I want to be able to log all console activity,... (4 Replies)
Discussion started by: patwa
4 Replies

2. Solaris

Prevent users logging in as root

I would like to know how to prevent users connecting to a server using SSH as root. I would still like them to be able to login with their username and then change to su. But I would like to prevent them logging in directly as root. I have searched the forum and read that I should set... (3 Replies)
Discussion started by: Sepia
3 Replies

3. BSD

Logging to /dev/console

Hi, The output of the cat ttys on a free BSD m/c console none unknown off secure # # Serial terminals # The 'dialup' keyword identifies dialin lines to login, fingerd etc. ttyd0 "/usr/libexec/getty std.9600" unknown on secure ttyd1 "/usr/libexec/getty std.9600" dialup off ttyd2... (0 Replies)
Discussion started by: mlalitha
0 Replies

4. Shell Programming and Scripting

User1 runs User2 scripts and updates logs?Is it possible?

Guys I have an odd request in hand. User1 Group1,Group2 User2 Group2,Group1 As can be seen ,both users belong to each other's group as well. Now User1 is holding some scripts(in a folder) on which perms are: 750 ..meaning User2 can read and execute but the execution is never successful... (1 Reply)
Discussion started by: ak835
1 Replies

5. UNIX for Advanced & Expert Users

console /dev/console get image

We are using software (Pegasys) which runs on SunOS 5.8 and reads images from a Philips nuclear camera. The software is designed to run from the console. I need to be able to capture the images it produces on the display. The caveat is that I cannot use the X Windows display because the X Server... (3 Replies)
Discussion started by: sreyes27
3 Replies

6. UNIX for Dummies Questions & Answers

Windows to Linux remote console using VNC brings up blank console screen with only mouse pointer

:confused:Hi This was installed on the Linux box a few weeks back by a guy that no longer works for us. All worked fine until last week. Now when we connect its just a blank screen with no icons. I get a whole bunch of errors when starting the service too: Tue Feb 23 14:29:45 2010 ... (1 Reply)
Discussion started by: wbdevilliers
1 Replies

7. Shell Programming and Scripting

Event logging to file and display to console | tee command is not able to log all info.

My intention is to log the output to a file as well as it should be displayed on the console > I have used tee ( tee -a ${filename} ) command for this purpose. This is working as expected for first few outputs, after some event loggin nothing is gettting logged in to the file but It is displaying... (3 Replies)
Discussion started by: sanoop
3 Replies

8. Solaris

"finger user1" pointing user1 and user2 as well why so?

Hello guys, on Solaris 10 os, I have this problem, When I finger one user it points to 2 user why so, -bash-3.2$ finger machova Login name: machovp In real life: raju Machova (LIB FinAcct User) Directory: /users/cz/182/machovp Shell: /usr/bin/ksh Never... (2 Replies)
Discussion started by: manalisharmabe
2 Replies

9. Linux

Syslog not logging successful logging while unlocking server's console

When unlocking a Linux server's console there's no event indicating successful logging Is there a way I can fix this ? I have the following in my rsyslog.conf auth.info /var/log/secure authpriv.info /var/log/secure (1 Reply)
Discussion started by: walterthered
1 Replies

10. OS X (Apple)

Does there exist a UNIX command to prevent docs' versions from uncontrolled erasing on logging in?

So far nobody on ASC, nor anywhere was able to respond to my issue and Google wasn't much of help either. I started to experience the issue some time ago: my OS is Lion 10.7.5. It occurs in all apps that have the function of versioning (iWork which I have updated up to v9.2, namely, Pages 4.2,... (0 Replies)
Discussion started by: scrutinizerix
0 Replies
edquota(8)						      System Manager's Manual							edquota(8)

NAME
edquota - edits quotas SYNOPSIS
/usr/sbin/edquota [-gGuU] -t /usr/sbin/edquota [-p proto_username] [-u] username ... /usr/sbin/edquota [-P proto_userID] -U userID ... /usr/sbin/edquota [-P proto_userID] [-u] username ... /usr/sbin/edquota [-p proto_username] -U userID ... /usr/sbin/edquota [-p proto_groupname] -g groupname ... /usr/sbin/edquota [-P proto_groupID] -G groupID ... /usr/sbin/edquota [-P proto_groupID] -g groupname ... /usr/sbin/edquota [-p proto_groupname] -G groupID ... PARAMETERS
Specifies a prototypical user or group by the user name or group name. A prototypical user or group has previously-defined, valid quota files that you want to duplicate for other user or group quota files. Specifies a prototypical user or group by the user id or group id. A prototypical user or group has previously-defined, valid quota files that you want to duplicate for other user or group quota files. FLAGS
Edits the quotas of one or more groups, specified by groupname on the command line. When used with the -t flag, sets or changes the grace period for all file systems with group quotas specified in the /etc/fstab file. Edits the quotas of one or more groups, specified by groupID on the command line. When used with the -t flag, sets or changes the grace period for all file systems with group quotas specified in the /etc/fstab file. Initializes the specified quotas by duplicating the established quotas of the prototypical user's name (when used with the -u flag, the -U flag, or no other flags) or the prototypical group's name (when used with the -g or -G flags). The proto_username or proto_groupname must have a valid quota file. Establishing quotas for one user or group and then using the -p flag to duplicate these quotas for other users is the normal mechanism for initializing quotas for a group of users. Initializes the specified quotas by duplicat- ing the established quotas of the prototypical user's id (when used with the -U flag or the -u flag) or the prototypical group's id (when used with the -G flag or the -g flag). The proto_userID or proto_groupID must have a valid quota file. Establishing quotas for one user or group and then using the -P flag to duplicate these quotas for other users is the normal mechanism for initializing quotas for a group of users. Sets or changes the default grace period for which users may exceed their soft limits. By default, or when you specify -t with the -u flag, the grace period is set for all file systems with user quotas specified in the /etc/fstab file. When you specify -t with the -g flag, the grace period is set for all of the file systems with group quotas specified in the /etc/fstab file. Edits the quotas of one or more users, specified by username ... on the command line. The -u flag is the default. The -u flag, used with the -t flag, changes the grace period for all file systems with user quotas specified in the /etc/fstab file. Edits the quotas of one or more users, specified by userID ... on the command line. The -U flag used with the -t flag, changes the grace period for all file systems with user quotas speci- fied in the /etc/fstab file. DESCRIPTION
The edquota command is a quota editor that allows you to add and modify user and group quotas and modify file system quota grace periods. Use the quota command to display the existing quota information. Note that disk quotas are displayed as 1 kilobyte blocks. For each user or group specified, the edquota command creates a temporary file with an ASCII representation of the current quotas for that user or group, then invokes an editor to allow you to modify the file. The vi editor is invoked by default. To override the default, specify a different editor for the EDITOR environment variable in your login file. Setting a hard limit to 0 (zero) indicates that no quota should be imposed. Setting a hard limit to 1 (one) indicates that no allocations should be permitted. Setting a soft limit to 1 (one) with a hard limit of 0 (zero) indicates that allocations should be permitted on only a temporary basis (see the -t flag). The current usage information in the file is for informational purposes; only the hard and soft lim- its can be changed. For each file system, the edquota command creates a temporary file with an ASCII representation of the current grace period for that user or group, then invokes an editor to allow you to modify the grace period. The grace period may be specified in days, hours, minutes, or seconds. Setting a grace period to 0 (zero) indicates that the default grace period should be imposed. Setting a grace period to 1 second indicates that no grace period should be granted. When you exit the editor, edquota reads the temporary file and modifies the quota.user and quota.group files for the target file system to reflect the changes made. Changes in grace periods take effect immediately unless a grace period is currently in effect. For example, assume a user exceeds a soft limit and receives a grace period of 7 days. A subsequent change to a grace period of 1 day will not affect the user's already-invoked grace period, unless the user drops below the soft limit and exceeds it once again. The default grace period for a file system is speci- fied in the quota.user and quota.group files for the target file system. RESTRICTIONS
You can use the edquota command to edit only those file systems that are in the /etc/fstab file and have userquota and groupquota entries. You must be the root user to edit quotas. NOTES
The term file system represents either a UFS file system or an AdvFS fileset. The root user can exceed user and group quotas. The fileset grace period is equal to the group grace period. When you use the edquota command to set the group grace period for a fileset causes that same value to be used for the fileset grace period. EXAMPLES
To apply the existing quotas of the user named user1 to the user named user2: /usr/sbin/edquota -p user1 -u user2 To apply the existing quotas of the user named user1 to the user named user2, using the default: /usr/sbin/edquota -p user1 user2 To apply the existing quotas of the user with the user id 361 to the user with the user id 382: /usr/sbin/edquota -P 361 -U 382 To apply the existing quotas of the user named user1 to the user with the user id 382: /usr/sbin/edquota -p user1 -U 382 FILES
Specifies the command path Contains user quotas for file systems Contains group quotas for file systems Contains file system names and locations RELATED INFORMATION
quota(1), quotacheck(8), quotaon(8), quotactl(2), fstab(4). delim off edquota(8)
All times are GMT -4. The time now is 09:07 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy