General :: Restrict A Single User Logon?
Jun 9, 2010how can i restrict a single particular user from logging into the server not more than 5 times?
The conditions may be:
1) wrong password
2) can login only 5 times on one day etc.
how can i restrict a single particular user from logging into the server not more than 5 times?
The conditions may be:
1) wrong password
2) can login only 5 times on one day etc.
I'm working on a script notifying me after a client changes a log level on a given server. I get the following error after running the script:
LogonUser [
odeunivmo3domaincommon]: unable to get property
LogonPassword [
odeunivmo3domaincommon]: unable to get property
I get the email notification fine, the environment is set to common. I think the problem is somewhere in these lines of code.
SCP_USER=`${cer_exe}/lreg -getp \
ode\\${NODE}\domain\\${loc_env} LogonUser`
SCP_PSWD=`${cer_exe}/lreg -getp \
ode\\${NODE}\domain\\${loc_env} LogonPassword`
1-Can I do su - userA in php? Cam I have php run the whole script as userA.
2-Can I make php to run from a certain directory? like chroot kind of things.
I use Rh server , can advise if I want to restrict the root user can not directly login to the system ( eg. ssh -l root IP_address" , what can i do ?
View 5 Replies View Relatedlogon to my RHEL as a user. I am able to logon in as root locally.
View 3 Replies View RelatedCan I restrict the number of ssh connections to my Linux box - by username or by ip or both?
View 1 Replies View RelatedDuring set-up of a home server (running Kubuntu 10.04), I created an admin user for performing administrative tasks that may require an unmounted home. This user has a home directory on the root partition of the box. The machine has an internet-facing SSH server, and I have restricted the set of users that can connect via SSH, but I would like to restrict it further by making admin only accessible from my laptop (or perhaps only from the local 192.168.1.0/24 range). I currently have only an
[Code]....
Is there way we can restrict root to su to normal user. Or at least a way to prompt for the password when root tries to su <username>.
View 3 Replies View RelatedI set up SSH on a server running Ubuntu using rsa key authentication. I want to allow a friend of mine to log into the server with restricted access, so I created a user account named "guest" with its own home directory and ensured that it has no root access. I created a new pair of keys and added the public key to my authorized_keys, but when I was testing SSH I noticed that not only could I not log in as guest, I could use the key to log in as my own account and gain root access via sudo. How can I restrict specific private keys to only be able to log in as certain users?
View 6 Replies View RelatedI want to limit delete of a particular folder in the user's home folder and to restrict any add/change/delete on files in that restricted directory.
/home/myuser
/home/myuser/_protected //no delete
/home/myuser/_protected/1.txt //only read
How can I do that on Ubuntu server?
If there is a general NFS share in the LAN and for example this share has three files - a, b, c is there any way to restrict file access to the root user of one particular host(falcon) in the same LAN environment while the normal users from the same host(falcon) should be able to access the NFS share & files a, b, c.
View 1 Replies View Relatedis there any way so that we can restrict root to delete a file/directories and What is extended file attributes.
View 12 Replies View RelatedWhat is the simplest way to restrict access to a single folder in Documents?
View 3 Replies View RelatedI need to restrict users if their download file size exceeds xxx amount, set later download speed to "256kbps".
OS: Centos 5.5
Squid 3.1.8
Is it possible to restrict root logons to the SSH server to just a single ip address (or maybe a range?) I have other users connecting to the server daily so restricting ALL access to a single ip i cannot do. I need root enabled (for my own reasons) but want to lock it down a bit more.
View 9 Replies View RelatedI've created Oracle Enterprise 5 Virtual machine. It was running fine but not sure what went wrong and now when ever I reboot the machine, it goes to single user mode. If I enter "init 5" command it boots to multi-user X11 mode without any problem.I checked inittab file and default line has id 5. So it looks OK. What else can be wrong?
View 15 Replies View RelatedI have a user that can ssh to every computer on our network expect for one. I verified that it has to be the account by having the user ssh from a different computer. the results were the same.
View 2 Replies View RelatedI'm running debian lenny. Suddenly when I rebooted my system I was unable to login. I type root and the password and it tells me the login is incorrect.If I boot into single user mode, it accepts the password just fine. Looking in the /etc/shadow file, it appears to be fine as well.Running passwd to set a new password sets a new password just fine, i can login to single user mode with the new password, however, I cannot login at a higher runlevel with the password.
If I delete a password in the /etc/shadow file, then try to login as that user, it simply says "Login Incorrect" without even asking for a password.
Upon OS start-up Debian gives a choice, one is just simply start Debian, another line to start Debian, but with brackets (single-user mode). What's this for? And when and why do you need to use this?
View 2 Replies View RelatedWhat good does getting into single user mode do?And what's the basic purpose of it , i.e is it maintaining purpose???
View 2 Replies View RelatedI'm trying to create a user john with default password 'abcdef'. I used the following command.
useradd john -p abcdef
I can't login with the password. in /etc/shadow file I can see the password in clear text format. how I can create a user along with password.
I am currently in a project to set up an LTSP server with 10 thin clients. I am using Ubuntu 9.10 (Karmic).
Installing server and booting clients are working fine. Now, according to the need, I have to restrict user session numbers and allow resuming previous user session.
I have achieved to do the first one, but still could not able to setup the second one. As per requirement, if some thin can have power failure, the same session should be restored back. I am confused here, if I need to focus on saving xsessions or saving gnome sessions. I am looking for a concrete solution as I am running out of time.
Is there anyway to prevent a user from being able to logon at a machine (Terminal and XWindows) but allow that user to logon remotely using SSH? This user is for remote capture of logs only - on a private network (no internet access).
View 1 Replies View RelatedI have this dump script that performs either full or incremental backups depending on the day of the week. From what I have read, when using dump you should drop to single user mode to help prevent the backups from being inconsistent before you issue the dump command. What I want is the script to drop to single user mode, perform the backups using dump, and then go back to runlevel 3 after the backups complete.
I know when you enter init 1 to drop to single user mode, but doing so within a script reboots the computer and drops it to single user mode and the rest of the script doesn't complete.What would be a good method for me to be able to accomplish what I want to do? Do I need to run other scripts that would call mine?I am running Centos 5.4
In fedora 14, the user order on GNOME login screen is completely different from that in fedora 13. Is there any way to order the users by date of creation ASC, not by name ASC?
Also, it is completely random. This time when I started my computer, my account was listed first. When I started this thread, it was listed last. What's happening?
I think someone hacked my server and I'm wondering if it's possible to view the possible the past user logons?
View 6 Replies View RelatedI'm running Suse 11.1. MySQL is installed. I downloaded and installed the software for MySQLAdmin and MySQLBrowser, this was one software package so both got installed at the same time. My question is this; When I log into MySQL to use the Admin Tools it doesn't like my root password. So I log in as 'localhost' with the id of 'root' and no password and I get right into the main Admin menu. Why doesn't it accept the root password and how can I change the root login to need to have a password. Will just changing the password in MySQL Admin do the trick?
View 5 Replies View RelatedI m new with Fedora 14, and i have a basic business case :
I want to setup a user which should
- only connect to the server with SSH (ex.: no X11 connection).
- cannot change its shell
- cannot do any SU / SUDO command
This user is very similar to a SERVICE user, as I expect him only to run a single program (its shell).
I've looked around and haven't been able to really understand how to do this yet.How can I set up a SSH user to access a single folder (and it's subfolders) on my system.I want to give my brother access to a folder under /media/Data/FilesBut I don't want him to access any other part of my system.I've set up a user (using useradd and gave him a password but no home directory).I want to have him use SSH to log in to my machine, start in the /media/Data/Files directory, and not be able to get out of that directory - but add/change/delete/etc any of the files.
View 8 Replies View RelatedI am running RHEL release 4 (Nahant Update 6). I currently have a fax server that has been encountering issues recently after hours. My boss would like our helpdesk to monitor the status of these modems throughout their shift. This has led to a request for a helpdesk account to be created on our linux box that only has access to a few commands. Is there a way to limit the new user to only have access to the following commands?
cd
less
cat
Additionally I would like to create a script for them to run that would chmod our modems when necessary since their permissions reset after a power cycle. BUT not give them access to the chmod command, just chmod through that script for those specific devices.