To disable user login on a solaris 10 server

Hello Everybody
I want to know how to disable further users login, if suppose there are 10 users already login on a server & I don't want any more user to login on a server without getting those exsisting users to logoff.
Regards

I suppose you could write a wrapper script that uses who to count the number of connections and then:
touch /etc/nologin
to disable further logons at some arbitrary number. Then you could stick the script into cron and let it do it's thing.
alan

Similar Messages

  • I want to monitor user logins on my solaris 10 os

    hi,
    i want to monitor logins on my solaris 10 os.
    i use the following commands, as instructed on a text book am using
    - touch /var/adm/loginlog
    - chmod 600 /var/adm/loginlog
    Change the group membership of the loginlog file to sys as follows
    - chgrp sys /var/adm/loginlog
    but when i type wrong password records donot show on this file
    /var/adm/loginlog

    Here are detailed instructions on how to set up auditing: http://blogs.sun.com/observatory/entry/auditing

  • IPlanet web server auto restart when user login or logout the NT server

    Configuration
    - NT Server 4.0 SP6a
    - iPlanet Web Server 6.0 SP4
    - JDK 1.3.1_03
    - NT audit turned on for the file <iPlanet WS 60 instance home>/config/password.conf
    We encounter a problem that when a user login / logout NT machine, the iplanet web server would be restart automatically.
    Could somebody advise why this happen and how it can be solved?
    There is a box called "Allow service to interact with desktop" in the service startup menu. What is it means and did it related to the problem?

    I think you are running into this:
    http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsunone%2F8322&zone_32=-Xrs%2A%20
    Thanks
    Manish

  • Server2003, enable / disable user login via powershell

    Hi all,
    Newbie, in Africa for short time only and probably haven't done all the homework I should have.
    Unix and OO background but just learning powershell.
    I need to be able to enable / disable local user accounts on a local server in a school; no clusters, pretty much stand-alone.  I presume if I can get the user object it has a member / method for enabling / disabling, but I don't understand how to get
    the user object.  In particular, I don't understand the two-character abbreviations used in front of params to queries.
    If I bring up active directory users and computers, what I see is:
    techna-school
      Tech/na school
          Students
    The users I want to enable/disable are members of the "Students" group above, and for RDP / security purposes are members of the "Learners" group.  The server is not in any "official" (i.e. DNS recognized) domain, just gets
    net access as a normal user via dialup and DHCP.
    I'm guessing I need something kinda like the following to get at the user objects, but I haven't a clue what the "ou", "dc", or anything else needed are supposed to be as I don't have an MS server background.
    $learners = [ADSI] "LDAP://ou=Learners,dc=techna-school"
    Any help would be much appreciated.
    Thanks,
    Gary

    From the sounds of it, you have domain accounts not local accounts. The difference is domain accounts can log onto any machine within your domain, whereas local accounts can only log onto the local machine they where created on. Since your users are using
    thin clients, it is most liekly a domain account they are using.
    For using AD cmdlets on Server 2003, you need some things in place, this article might help you
    Thanks for the info and pointer.
    I'm a little leery of going through that process as I don't have a test system to work on, but I appreciate the pointer; may delve into that later.
    In the meantime, I've managed to get the user objects using Get-WmiObject, but an attempt to modify them via Set-WmiInstance fails:
        $learners = Get-WmiObject -query "Select Name,Disabled From Win32_UserAccount"
        foreach ($learner in $learners) {
          Set-WmiInstance -InputObject $learner -Argument @{Disabled=$True} -PutType UpdateOnly
    Set-WmiInstance : Invalid Object
    Seems pretty straight-forward so I suspect it is a simple error but I'm not seeing it.

  • Anonymous user login - failed to start EP server

    Hi all,
    I changed UME properties to allow anonymous access on EP.
    1. Created a user "anonymous" on ABAP system ( i m using ABAP system for users no ldap)
    2. On ep.. System admin ->system configuration -> UM configuration -> Direct editing
    3. Changed ume.login.guest_user.uniqueids to "anonymous"
    4. ume.login.anonymous_user.mode = 1. This property was already 1.. so kept it as it is
    5. Save all changes and restarted the Server using MMC control. Ep dint start
    Developer trace:
    [Thr 3832] Thu Dec 15 11:04:23 2005
    [Thr 3832] JHVM_RegisterNatives: registering methods in com.sap.bc.proj.jstartup.JStartupFramework
    [Thr 3832] JLaunchISetClusterId: set cluster id 3930150
    [Thr 3832] JLaunchISetState: change state from [Initial (0)] to [Waiting for start (1)]
    [Thr 3832] JLaunchISetState: change state from [Waiting for start (1)] to [Starting (2)]
    [Thr 5760] Thu Dec 15 11:05:06 2005
    [Thr 5760] JLaunchIExitJava: exit hook is called (rc=-11113)
    [Thr 5760] JLaunchCloseProgram: good bye (exitcode=-11113)
    I have reseted all the changes i have done, but still its not starting. I used configtool to reset the changes.
    please help me on this as its critical  now.. we are in testing phase..
    regards
    ashutosh

    Core service security failed. J2EE Engine cannot be started.
    com.sap.engine.services.security.exceptions.SecurityServiceException: Unexpected exception:
         at com.sap.engine.services.security.SecurityServerFrame.start(SecurityServerFrame.java:173)
         at com.sap.engine.core.service630.container.ServiceRunner.startApplicationServiceFrame(ServiceRunner.java:211)
         at com.sap.engine.core.service630.container.ServiceRunner.run(ServiceRunner.java:142)
         at com.sap.engine.frame.core.thread.Task.run(Task.java:64)
         at com.sap.engine.core.thread.impl5.SingleThread.execute(SingleThread.java:74)
         at com.sap.engine.core.thread.impl5.SingleThread.run(SingleThread.java:141)
    Caused by: com.sap.engine.services.security.exceptions.BaseSecurityException: <b>Anonymous principal not configured</b>     at com.sap.engine.services.security.login.SecurityContext.setAnonymousPrincipal(SecurityContext.java:513)
         at com.sap.engine.services.security.SecurityServerFrame.start(SecurityServerFrame.java:138)
         ... 5 more
    Caused by: com.sap.security.core.server.userstore.UserstoreException: <b>Could not get user J2EE_GUEST</b>     at com.sap.security.core.server.userstore.UserContextUME.engineGetUserInfo(UserContextUME.java:193)
         at com.sap.engine.services.security.userstore.context.UserContext.getUserInfo(UserContext.java:102)
         at com.sap.engine.services.security.login.SecurityContext.setAnonymousPrincipal(SecurityContext.java:507)
         ... 6 more
    Caused by: com.sap.security.api.NoSuchUserAccountException: USER_AUTH_FAILED: User account for logonid "J2EE_GUEST" not found!
         at com.sap.security.core.imp.AbstractUserAccount.<init>(AbstractUserAccount.java:340)
         at com.sap.security.core.imp.DBTextFileUserAccount.<init>(DBTextFileUserAccount.java:56)
         at com.sap.security.core.imp.UserAccountFactory.getUserAccountByLogonId(UserAccountFactory.java:426)
         at com.sap.security.core.imp.UserAccountFactory.getUserAccountByLogonId(UserAccountFactory.java:277)
         at com.sap.security.core.imp.UserAccountFactory.getUserAccountByLogonId(UserAccountFactory.java:458)
         at com.sap.security.core.imp.UserAccountFactory.getUserAccountByLogonId(UserAccountFactory.java:453)
         at com.sap.security.core.server.userstore.UserContextUME.engineGetUserInfo(UserContextUME.java:189)
         ... 8 more
    i have j2ee_guest user on my abap system... and i have not set the anonymous access
    regards
    ashutosh

  • Howto disable direct login into DB server

    Hello Experts,
    I have a very old system with me(SAP 4.0B running on AIX/Oracle DB) which has 7 application servers, however there is too much load on all servers.
    I wish to restrict users logging directly onto the DB server.
    Is there a way to disable users login into DB servers, I know about SAP logon groups, however a user would still be able to bypass it by configuring direct connection in the saplogon.
    There could be a parameter perhaps that I don't recollect right now !
    Any help is appreciated.
    Regards,
    Siddhesh

    Hi Ermanno,
    I was aware of this solution, but didn't have detailed knowledge about it , cause I am primarily a Basis guy.
    I have assigned some points to you currently, I will check with my ABAPers and let you know.
    Meanwhile I'll keep the question open, just in case if someone has some parameter or some other easier option available..
    Thanks again.
    Regards,
    Siddhesh

  • Run a powershell script on every user login/unlock

    Hi everybody
    I need to run a powershell (that opens an interactive dialog box) when every user log in or unlock session or remote connection to this server.  In other words it have to be run every time a user enters a credential. 
    I tried task scheduler, but it didn't work properly. I tried triggers like "on workstation unlock" and "on connection to user session". I change user and group to administrators but still it runs under the author user (me) . 
    I found out user login event id is 4801 and 4778. can I use these event ids to run powershell code? Can I check raising the event ids through my code? 
    any other idea please?
    Thanks in advance

    Im not going to block a logon! I want to run a powershell code for every user login. assume like a message after user login. this kind of message for me is showing to me after other users login.
    specifically this is a window from that I designed to execute on user login to show on the server and every user writes down in the text box the changes that is making on the server. this is a changes log solution to me. then I need to show every user to
    work properly.
    You can run a scheduled task at logon that can display a message.  You can define this task in Group Policy.
    You can also just use the standard user logon message which can also be defined in Group Policy.
    You can execute a script task whenever an unlock event happens.  This, too, can be defined in Group Policy.
    ¯\_(ツ)_/¯

  • Disabling User in Solaris

    Is there anyway to change the way the resource adapter for Solaris and Linux disables users so that it uses the native lock provided through passwd rather than setting a random password?
    Scott

    Is there anyway to change the way the resource
    adapter for Solaris and Linux disables users so that
    it uses the native lock provided through passwd
    rather than setting a random password?No there is no way to do that.
    The usage of passwd -d and or -l is limited to certain installations. If you read the man page for passwd you will see that it only works for files as the repository not for any of the other possibilities (NIS or NIS+ or ldap). It also depends on PAM modules to implement this and they do not have to be configured on the system.
    WilfredS

  • Disable multiple users login with single user id

    hi,
    I have a problem. I give a single user id to a  person and many people login to the server from different computers through that id.
    Please tell me how to block that only one user can login with a particular id at a particular time

    Hi Balaji,
    To disable multiple logins add parameter login/disable_multi_gui_login = 1 using RZ10
    Hope this help!
    Juan
    Please reward with points if helpful

  • How can we disable user to login Hyperion Workspace

    We understand we can set to admin mode for Hyperion Planning so that only administrator can login the system. Any other ways to disable users to login Hyperion Workspace? We are using Hyperion version 11.1.1.1
    Thanks a lot!

    JohnGoodwin wrote:
    Hi,
    Just to confirm you want to stop users creating Financial reports using the Reporting Studio? If so then you would remove the role of "Report Designer" in there provisioning.
    Cheers
    John
    http://john-goodwin.blogspot.com/
    Thanks John. We just want to disable user using FR report prepared in Reporting Studio and put under "Explore" of Workspace. We found that we can't do that once the user is login into Workspace. The only way we can do is to setup the security setting of each FR report based on the group setting.

  • Disable Multiple User login for ITS

    Hi,
    The parameter “login/disable_multi_gui_login” Controls the deactivation of multiple dialog logons at GUI level only.
    Please let me know how to activate the same if the users are logging in thru Webgui (ITS 6.40 / 7.00).
    Thanks,
    Tanuj

    Hi Balaji,
    To disable multiple logins add parameter login/disable_multi_gui_login = 1 using RZ10
    Hope this help!
    Juan
    Please reward with points if helpful

  • Is it possible to disable multiple logins?

    Is it possible to disable multiple logins by the same user on different computers? I have network hosted user accounts. I need a way to NOT make it possible for user A to go to client Mac A, login and leave himself logged in there then go to client Mac B and login there also. This is creating some unpleasant effects on the server - naturally!
    Any easy way to accomplish this? Perhaps through Profile Manager?
    Thanks!

    Simon,
    Thanks for the reply but I need some elaboration.... "the "Login" preferences for users and groups".... what exactly are we referring to? I don't see such option (or atleast the way it's written), in either Server app or Profile Manager. Are we talking about the same OS X version?
    Thanks.
    P.S. Despite the fact that I have enabled the option in Profile Manager to logout all users on all computers after 30 minutes of inactivity, I have noticed that the iMac clients don't log out the users after the said time...

  • Creating a warning banner at the login screen in solaris 10 GNOME

    Does anyone know how to create a a warning banner at the login screen in solaris 10 GNOME so users have to hit OK or Enter before typing in their username?
    A million thanks,
    Johnny Mac

    I have had problems after the 10.5.2 update. I ended up with a frozen computer - unable to restart or shut down etc. Also ended up at one stage with Set Up Assistant screen. With the help of a computer savvy friend, at least I am able to use my computer again.
    It appears the actual download did happen but it did not install and the computer tells me I need to "re-start". When I did this, window appeared on plain blue screen saying it was installing software but absolutely nothing happened - no blue scrolling bar etc.
    My iMac computer is still under Apple Care Plan and technician told me they are many problems surfacing across the various machines with this upgrade. He has asked me to delay updating the software and to ring back in a couple of days because their technicians are currently working on the problem and he hopes for an answer soon.

  • 802.1X wirelss restriction on User Login policies

    Hi all,
    Seeking some technical idea on Wireless 802.1x setup.
    Business requirement is:
    "User login policy: to limit the number of concurrent login by a single user only apply to one device at any given time. "
    There is no problem on PEAP/MSCHAPv2 login, only thing is the same user credential able to be use and login on multiple device, in the same time.
    On the NAD part, we configure these on WLC but still cannot achieve our objective
    - advanced eap max-login-ignore-identity-response disable
    - netuser maxuserLogin 1
    Seeking technical solution on this case, please advice. Is there anything need to tweak on the directory server or ACS part?
    The components using as below:
    Supplicant 1: Window 7, authentication method using PEAP/MSCHAPv2
    Supplicant 2: iPhone iOS version 6.x
    Authenticator: Cisco Wireless Controller 5800 Series on code version 7.2
    Authentication server: Cisco secure server ACS 5.3.0.40
    Identity Source : Microsoft server 2008 R2 ADDS, single forest single domain.
    attached the network diagram: topo1.png

    http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/112175-acs51-peap-deployment-00.html

  • Disabled User Password should not be changed

    Hi,
    We have a requirement that only if the user's status is active, then only administartor must be able to change the user password. Admin should not be able to change the password if the user is in disabled state/locked state.How can we achieve this?please sugest...
    Regards
    Vinoth

    Hi,
    We have made an entity adapter which is taking usr login value from User[in Data object manager] and calling our java method which is making connection to OIM database and getting us the status of user.
    Now if the status of user is disabled method is returning true and on true we have associated our error code to it.
    We are executing our entity adapter in pre-update execution.
    Now when we are changing password of any disabled user we are able to see our error code. But what ever update [either first name update, enable] we are running on that user same error code is appearing.
    Plesae suggest/reply.
    thanks

Maybe you are looking for