Solaris

Hi,

I need to implement something that will enforce login to a Solaris server as a particular, specifed user. After this login stage, users will be able to "su -" to whichever user they wish, by which time their activity will be captured by some sort of script (yet to be written). What I need to know is: how do I make the SSH or telnet sessions enforce login by a single, specified user rather than permitting login by any user?

Any help greatly appreciated.

James Geoghegan

add

AllowUsers username1

or

AllowUsers username1 username2

to /etc/ssh/sshd_config

then restart ssh

man sshd_config for details

Many thanks, funksen. I assume that sshd_config is for SSH only and not for telnet? Any ideas on telnet?

Thanks again,

James Geoghegan

Why don't you change /etc/profile (and /etc/.login if a CSH variant is used) to check for a list of usernames and log you out if you're not one of them?

Thanks, Cambridge; interesting idea - but I wouldn't know how would I log users out if they weren't desirable?

James

In /etc/profile:

Code:

if [ "$LOGNAME" = invader ]; then
    echo You are not allowed to login to this host
    exit
fi

In /etc/.login:

Code:

if ("$LOGNAME" == "invader") then
    echo You are not allowed to login to this host
    logout
endif

Thanks again, Cambridge. I'll use this.

James