How to identify users that have su'ed to a different account?

7 More Discussions You Might Find Interesting

1. Solaris

Remove a given profile from a users account

Hi Guys, I was studying RBAC and I gave a profile to a user . I have not seen anywhere that shows how to remove the profile from the users account. Can anyone show me how to remove a given profile from a users account? Thanks alot guys.

2. Red Hat

how to setup An extra account with name 'unixuser' who can have the previlege to reset other users?

Hi I want to setup an extra account with name 'unixuser' who has the previlege to reset the passwords of other users like eng or myuser (other user). Please help me.. Waiting for a reply.. Thanks, MJavalkar

3. Cybersecurity

Please help identify these user account

Please help me identify these user accounts.. bin, lp, nuucp, smbnull, mysql, tftp Can we remove these user or disable these users?We have to apply the security policy about the user identification.Since it was settup by our vendor long time ago. We do not have these informations about these...

4. Cybersecurity

Private account for administration users

Hello, My DBAs are connecting to the unix servers with ORACLE account. I would like to create for each one of them a private user . Only after connecting in ther private user allow them to su -oracle . My problem is that i need to prevent them from connecting remothly with SSH as oracle user....

5. UNIX for Advanced & Expert Users

audit user commands of different users under root account

Hi, I would like to know if there is anyway that I can pinpoint the user before/after he connects to the root? Also, I'm trying to find out what are the commands he inputs under root access.

6. Shell Programming and Scripting

Script to identify logged users & commands executed

Hi All, I am trying to write a script to get the user information & the command executed. I tried something like this : w | sort | awk '{print$5$6$7}' My requirement is to identify the users who execute the same command at same time. I need the user name & the...

7. UNIX for Dummies Questions & Answers

How to know what users are logged in to account

hello all say im logged in to account ar root , but I can't change any thing there ( like username ) if someone is already logged in also . how can I know who is ( user name ) also connected to the user im using ?

LEARN ABOUT SUSE

pam_localuser

PAM_LOCALUSER(8)						 Linux-PAM Manual						  PAM_LOCALUSER(8)

NAME

       pam_localuser - require users to be listed in /etc/passwd

SYNOPSIS

       pam_localuser.so [debug] [file=/path/passwd]

DESCRIPTION

       pam_localuser is a PAM module to help implementing site-wide login policies, where they typically include a subset of the network's users
       and a few accounts that are local to a particular workstation. Using pam_localuser and pam_wheel or pam_listfile is an effective way to
       restrict access to either local users and/or a subset of the network's users.

       This could also be implemented using pam_listfile.so and a very short awk script invoked by cron, but it's common enough to have been
       separated out.

OPTIONS

       debug
	   Print debug information.

       file=/path/passwd
	   Use a file other than /etc/passwd.

MODULE TYPES PROVIDED

       All module types (account, auth, password and session) are provided.

RETURN VALUES

       PAM_SUCCESS
	   The new localuser was set successfully.

       PAM_SERVICE_ERR
	   No username was given.

       PAM_USER_UNKNOWN
	   User not known.

EXAMPLES

       Add the following line to /etc/pam.d/su to allow only local users in group wheel to use su.

	   account sufficient pam_localuser.so
	   account required pam_wheel.so

FILES

       /etc/passwd
	   Local user account information.

SEE ALSO

       pam.conf(5), pam.d(5), pam(8)

AUTHOR

       pam_localuser was written by Nalin Dahyabhai <nalin@redhat.com>.

Linux-PAM Manual						    04/01/2010							  PAM_LOCALUSER(8)

UNIX for Beginners Questions & Answers