Sponsored Content
Operating Systems Solaris How can i prevent logging user1 from console? Post 302705423 by jlliagre on Monday 24th of September 2012 09:14:36 PM
Old 09-24-2012
@Corona688: /usr/bin/false makes su useless. su is invoking the target user's shell after a successful login, thus su kind of succeeds but exits immediately.

Quote:
Originally Posted by maxim42
do u have another method ?
Here is one that works:
Make user1 a role and grant it to user2:
Code:
usermod -K type=role user1
usermod -R user1 user2

No direct login as user1 will be allowed.
Only root and user2 will be allowed to su to user1.
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Logging all console activity to a file - how?

Hi all, Well I've had a bit more experience with Unix-like environments since my last post, now that I have started working on my website in earnest and am doing much of the file manipulation via the command line through SSH. The thing is, I want to be able to log all console activity,... (4 Replies)
Discussion started by: patwa
4 Replies

2. Solaris

Prevent users logging in as root

I would like to know how to prevent users connecting to a server using SSH as root. I would still like them to be able to login with their username and then change to su. But I would like to prevent them logging in directly as root. I have searched the forum and read that I should set... (3 Replies)
Discussion started by: Sepia
3 Replies

3. BSD

Logging to /dev/console

Hi, The output of the cat ttys on a free BSD m/c console none unknown off secure # # Serial terminals # The 'dialup' keyword identifies dialin lines to login, fingerd etc. ttyd0 "/usr/libexec/getty std.9600" unknown on secure ttyd1 "/usr/libexec/getty std.9600" dialup off ttyd2... (0 Replies)
Discussion started by: mlalitha
0 Replies

4. Shell Programming and Scripting

User1 runs User2 scripts and updates logs?Is it possible?

Guys I have an odd request in hand. User1 Group1,Group2 User2 Group2,Group1 As can be seen ,both users belong to each other's group as well. Now User1 is holding some scripts(in a folder) on which perms are: 750 ..meaning User2 can read and execute but the execution is never successful... (1 Reply)
Discussion started by: ak835
1 Replies

5. UNIX for Advanced & Expert Users

console /dev/console get image

We are using software (Pegasys) which runs on SunOS 5.8 and reads images from a Philips nuclear camera. The software is designed to run from the console. I need to be able to capture the images it produces on the display. The caveat is that I cannot use the X Windows display because the X Server... (3 Replies)
Discussion started by: sreyes27
3 Replies

6. UNIX for Dummies Questions & Answers

Windows to Linux remote console using VNC brings up blank console screen with only mouse pointer

:confused:Hi This was installed on the Linux box a few weeks back by a guy that no longer works for us. All worked fine until last week. Now when we connect its just a blank screen with no icons. I get a whole bunch of errors when starting the service too: Tue Feb 23 14:29:45 2010 ... (1 Reply)
Discussion started by: wbdevilliers
1 Replies

7. Shell Programming and Scripting

Event logging to file and display to console | tee command is not able to log all info.

My intention is to log the output to a file as well as it should be displayed on the console > I have used tee ( tee -a ${filename} ) command for this purpose. This is working as expected for first few outputs, after some event loggin nothing is gettting logged in to the file but It is displaying... (3 Replies)
Discussion started by: sanoop
3 Replies

8. Solaris

"finger user1" pointing user1 and user2 as well why so?

Hello guys, on Solaris 10 os, I have this problem, When I finger one user it points to 2 user why so, -bash-3.2$ finger machova Login name: machovp In real life: raju Machova (LIB FinAcct User) Directory: /users/cz/182/machovp Shell: /usr/bin/ksh Never... (2 Replies)
Discussion started by: manalisharmabe
2 Replies

9. Linux

Syslog not logging successful logging while unlocking server's console

When unlocking a Linux server's console there's no event indicating successful logging Is there a way I can fix this ? I have the following in my rsyslog.conf auth.info /var/log/secure authpriv.info /var/log/secure (1 Reply)
Discussion started by: walterthered
1 Replies

10. OS X (Apple)

Does there exist a UNIX command to prevent docs' versions from uncontrolled erasing on logging in?

So far nobody on ASC, nor anywhere was able to respond to my issue and Google wasn't much of help either. I started to experience the issue some time ago: my OS is Lion 10.7.5. It occurs in all apps that have the function of versioning (iWork which I have updated up to v9.2, namely, Pages 4.2,... (0 Replies)
Discussion started by: scrutinizerix
0 Replies
usermod(3pm)						User Contributed Perl Documentation					      usermod(3pm)

NAME
Linux::usermod - modify user and group accounts SYNOPSIS
use Linux::usermod; $user = Linux::usermod->new(username); $grp = Linux::usermod->new(groupname, 1); $user->get(gid); # equal to $user->get(3); $user->get(uid); # equal to $user->get(2); $grp->get(gid); # equal to $user->get(2); $grp->get(users);# equal to $user->get(3); #lock and unlock user account $user->lock(); $user->unlock(); #get password(passwd file) $user->get(ppassword); #get encoded password(shadow file) $user->get(password); #set encoded password $user->set(password); $grp->set(password); #set shell / group administrator $user->set(shell); $grp->set(ga); #set group users @users = qw(user1 user2); $grp->set(users, "@users"); Linux::usermod->add(username); #or Linux::usermod->add(username, password, uid, gid, comment, home, shell); #where the password goes in shadow file and gid becomes #equal to uid unless specified and uid is becoming the #first unreserved number after 1000 unless specified #or @users = qw(user1 user2 user3); Linux::usermod->grpadd(groupname, gid, "@users") #where the password goes in gshadow file and gid becomes #equal to the second argument or the first unreserved number #after 100 #delete user/group Linux::usermod->del(username); Linux::usermod->grpdel(groupname); #all fields are returned from the class methods fields/gfields print $user->get($_) for (Linux::usermod->fields); print $grp->get($_) for (Linux::usermod->gfields); #set working passwd and shadow files #$Linux::usermod::file_passwd = "./my_passwd"; #$Linux::usermod::file_shadow = "./my_shadow"; #$Linux::usermod::file_group = "./my_group"; #$Linux::usermod::file_gshadow= "./my_gshadow"; DESCRIPTION
This module adds, removes and modify user and group accounts according to the passwd and shadow files syntax (like struct passwd from pwd.h). It is not necessary those accounts to be system as long as $Linux::usermod::file_passwd, $Linux::usermod::file_shadow, $Linux::usermod::file_group, $Linux::usermod::file_gshadow are not in "/etc" directory. METHODS
new Linux::usermod->new(username) Linux::usermod->new(grpname, 1) If group object second 'true' argument must be given add (username, ...) Class method - add new user account; arguments are optional, except username; they may be (username, password, uid, gid, comment, home, shell) del (username) Class method - removes user account tobsd converts user fields in shadow / master.passwd file to bsd style get if used with user object returns one of the following fields: 'name' or 0 The user's name 'ppassword' or 1 The "passwd" file password 'uid' or 2 The user's id 'gid' or 3 The user's group id 'comment' or 4 The comment about the user (real username) 'home' or 5 The user's home directory 'shell' or 6 The user's shell 'sname' or 7 The user's name in shadow file 'password' or 8 The 13-character encoded password 'lastchg' or 9 The number of days since January 1, 1970 of the last password changed date 'min' or 10 The minimum number of days required between password changes 'max' or 11 The maximum number of days the password is valid 'warn' or 12 The number of days before expiring the password that the user is warned 'inactive' or 13 The number of days of inactivity allowed for the user 'expire' or 14 The number of days since January 1, 1970 that account is disabled 'flag' or 15 Currently not used if used with group object returns one of the following fields: 'name' or 0 The group name 'ppassword' or 1 The group password 'gid' or 2 The group id number 'users' or 3 The group members (users) 'sname' or 4 The group name in gshadow file (the same as 'name') 'password' or 5 The encrypted group password 'ga' or 6 The group administrators 'gu' or 7 The group members (users) (the same as 'users') argument can be either string or number set (field) set a field which must be string of characters: @user_fields = Linux::usermod->fields; #user fields @group_fields = Linux::usermod->gfields; #group fields grpadd (groupname) grpdel (groupname) lock (username) Lock user account (puts '!' at the beginning of the encoded password) unlock (username) Unlock user account (removes '!' from the beginning of the encoded password) users Class method - return hash which keys are all users, taken from $file_passwd grps Class method - return hash which keys are all groups, taken from $file_group FILES
/etc/passwd /etc/shadow /etc/group /etc/gshadow unless given your own passwd, shadow, group, gshadow files which must be created TO DO
Groups and user accounts consistency checks SEE ALSO
getpwent(3), getpwnam(3), usermod(8), passwd(1), gpasswd(1) BUGS
None known. Report any to author. AUTHOR
Vidul Petrov, vidul@abv.bg (C) 2004 Vidul Petrov. All rights reserved. This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.8.8 2008-01-11 usermod(3pm)
All times are GMT -4. The time now is 03:23 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy