Unlock with Admin to Auto-Logout

Looking for a way to have the system auto-logout if the screen is unlocked by an administrator. So if User1 is logged in and an admin unlocks the screen, User1 is logged out. This is enterprise standards that have to be met.
If FastUserSwitching is enabled, is there a way to have a login script check how many users are logged in and to log out if more than one are? I've tried messing around with the USERS and LOGNAME commands but they don't seem to work in a shell script like they do with direct input in terminal.
It'd be best to achieve this without any third party apps and only with scripts.
Anyone have any ideas?
Thank!

I don't think this is possible. To my knowledge, unlocking a screen doesn't trigger any system event or other process to which any script can be attached.

Similar Messages

Unable to modify/replace/unlock hosts file with admin account

Hi all,
I'm having a serious issue when trying to modify the hosts file in Yosemite 10.10.3
I already tried through the terminal with sudo commands, Get Info window, editing the file externaly and then trying to replace the original hosts with the new but nothing works. Already repaired the disk permisions in case it had to be with the issue but didn't help.
I'm using an account with admin privileges but it seems I'm not allowed to unlock the file.
Here is a screenshot of how the GetInfo windows looks like for the hosts file:
And here is what I get when trying to save from sudo nano /private/etc/hosts
Any help will be highly welcomed.

sudo chflags nouchg /private/etc/hosts
and relock it when you've finished
sudo chflags uchg /private/etc/hosts
It's locked for a reason.
C.

GXD:auto logout (maximum user idle time excedded)

Hi Gurus
I am connecting to an PI System and an R/3 System through AT & T dialler network. after logging into the systems, i am going through different scenarios and code in the respective systems. Till 15 to 20 minutes it working fine, afetr that i am getting the following error "GXD:auto logout (maximum user idle time excedded)" and "BDV:auto logout (maximum user idle time excedded)".
i have checked the profile parameetr instance "rdisp/gui_auto_logout" , In R/3 system it is given as 1800 and in PI system i do not have the authorization.
Please help me to resolve the issue.
I am working on client netowrk, shld i raise the issue with the basis Guys or it will be handled locally by the network guys.
Please help
Tahnking You

Hi Arjun,
You can contact your BASIS/ADMIN team and ask them to increase the time interval for rdisp/gui_auto_logout so that your login will remain for long time.
Also check the link below for ref....
http://help.sap.com/saphelp_nw04/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htm
Thanks and Regards,
Naveen

Firefox Silent updater will not work unless I launch Firefox.exe one time with Admin rights

I am building a Firefox 17.0.4 ESR package to use for my Enterprise. Everything is working great except for the updater piece. I am using the configuration.ini file during the install with the command MaintenanceService=true turned on, and a mozilla.cfg file with updates enabled, pref("app.update.enabled", true). I am running the install both manually, and through SCCM with Admin rights, including the maintenance service. After the install runs, I open Firefox as a limited user and go to Help->About, and it says Updates are available at www.firefox.com, and that the browser is set to the ESR release channel.
In all my troubleshooting, the only 2 sure ways I have found that make the auto updates work for a user were to run firefox.exe as an admin 1 time, or to install the base esr package as an admin after my install package. That will fix it for the logged in user only, but another user would run into the same issue. It appears that something is not installing correctly, but I cannot determine the cause.
My install command is:
Firefox Setup 17.0.3esr.exe /INI=%INST%\Configuration.ini

In my organization, we have removed Admin rights from all users, but use a product that can elevate any .exe with create a policy for to run with Admin rights. We have a policy set for updater.exe and it does work for future updates, just not this first update after install until Firefox itself is run as Admin for the first time. My thought is that when Firefox and the Maintenance service are installed with Admin rights through SCCM, the maintenance service should have inherited rights from that install. Forgive me if I am wrong in my conclusion.

Cannot unlock my Admin account, updaters fail, more...

After installing SL, I can no longer unlock my Admin account. When I click the lock to make changes, it says "Authenticating..." for a second, then stays locked. When trying to update applications (I've tried several), the "Install" button dims for a moment (like it's starting), then nothing happens. In System Prefs, when I click on Security, it says "Loading Security..." and nothing happens. I went to Keychain Access, can't unlock System keychain either. Ran Keychain First Aid, no problems reported. I re-installed SN, nothing changed. Can anyone give me some suggestions?

rockinphilly wrote:
Logging in with the newly-created User account ("root"), everything appears to be fine. Padlock is unlocked and I can access my original User account and unlock that, etc. I can also see and change Security settings in my System Prefs. However, there is no HD icon on my screen, only my two external drives.
that's not a problem. you can change finder preferences->general to show internal hard drives on the desktop.
When I log out and come back in with my original User name, everything is still locked out just like before.
that's expected too. but you didn't follow all my instructions. log in as root again, go to system preferences->accounts and create a NEW admin user. then log out from root and log in as the new user you just created. do you have the same authentication problem when logged in as the new user?

Unable to access Runtime Services with admin user

Hi all,
Trying to access runtime services with admin user returns a "Authentication Denied
The username or password has been refused by Runtime Services. Please try again."
Credentials are correct. It seems to be some kind of lockout. I´ve copied this admin user entry in ldap and named it admin2, this "new" user can perfectly log.
As it could be a lockout I have unlocked the user although the proper tab said there was no locked user.
The realm is in a openldap.
Any hint would really be appreciated.

Hi all,
Trying to access runtime services with admin user returns a "Authentication Denied
The username or password has been refused by Runtime Services. Please try again."
Credentials are correct. It seems to be some kind of lockout. I´ve copied this admin user entry in ldap and named it admin2, this "new" user can perfectly log.
As it could be a lockout I have unlocked the user although the proper tab said there was no locked user.
The realm is in a openldap.
Any hint would really be appreciated.

Tell me the perameter to set maximum gui auto logout time for limited users

hi gurus...
i want to know the perameter to set the maximum gui auto logout time for limited users...
at present i have auto logout time as 30 minutes..but i need to set the value as 10 minutes for some group of user...
if any one know any perameter plz let me know..
thanks in advance,
chaitanya...

Hi Chaitanya,
I don't think theres a specific parameter to achieve this, but you can set the value of rdisp/gui_auto_logout to 10 in one of the instances and create a new logon group for this users.
Hope this help!
Juan
Please reward with points if helpful

Auto logout time different per users

Hello
we are using almost all modules in ECC. So we have 2 kinds of SAP users, the administrative ones and the operational ones.
The administrative ones is using SAP all the day by creating purchase orders, process orders or recording control results by example. When they make an activities in SAP they can completed the task without any interruption.
But we have as well operational users who are using SAP to make physical activities like to place pallet in the warehouse with WM functions and to weight a drum from the PI-sheet in PPPI.
The auto logout is after 15 minutes of inactivity and I don't find how to set it up per users. In deed, the operator in production needs time between each weighing meaning stick label, remove the previous drum, take the new one, write information on the paper batch record, ... The time between 2 actions in SAP is more than 15 minutes. So the operator is automatically logout between each weighing and it takes around 2 minutes to log again and reload the Pi-sheet. By example, to weight 46 drums the operator will lost more than 1,5 hour. It's not acceptable by the production.It increases the production time of 16%.
How can I set up a auto logout time to 15 minutes or less for the administrative users and 1 hour for the production users located in a protected area ( no access by external people) ?
thanks in advance for your answer
regards
V Noirot
PPPI team lead

Hi,
You can increase the logout time for the endusers. But the power users, throughout the day they will be using the system. This time increase will not affect much on the power users. If you are saving some productive hours by increasing this time out means, you can do this. But it will act similar for both the users.
regards,
V. Suresh

Safari canceling auto logout

Recently my auto timed logout (set in my System Security Pref) is being canceled by Safari for some reason. I get a popup message to that effect. What would cause this behavior? I have used Safari 5.1.7 and Snow Leopard 6.8 for a long time on my MacBook Pro and have never had a problem with the timed security logout. The only recent change I have made was to update the Firmware as suggested by Software Update on my mac.

Hi Lalit,
You can change the default password length with setting "login/min_password_lng".
Minimum length is 3 characters. From NetWeaver 2004s on, you are up to 40 characters.
Before the maximum was / is 8 characters possible.
See Note 2467 - Password rules & preventing unauthorized logons and Note 862989 - New password rules as of SAP NetWeaver 2004s (NW ABAP 7.0)
Succes,
Albert

OEM 10g Auto Logout

Hi altogether,
is there anybody who knows how to disable auto-logout? I've searched the profiles and roles, but evething seems to be o.k., in the default-role every option is 'unlimited'.
Thanks a lot
best regards
Andreas

Yah, I found the official metalink note:
1. Navigate to the EM OMS $ORACLE_HOME/sysman/config directory.
2. Make a backup copy of the emoms.properties file and then open the original file with a text editor. Go to the bottom of the file and add the line: oracle.sysman.eml.maxInactiveTime=60. This will set the idle session time to 60 minutes before disconnecting the session.
3. Stop the Management Service and restart it.
emctl stop oms
emctl start oms
This setting will increase the timeout to 60 minutes instead of the default 15 minutes.

Forcing iCal to Quit when auto-logout occurs

I have auto-logout set so others can't access my account. If I inadvertently leave iCal open before I leave, the logout won't happen because iCal doesn't shut down (this happens with other apps like Pages as well). Is there a way to make the logout event force-quit apps?

errmm, guess no one figured a solution out yet? i'd be interested in the outcome as well, i have exactly the same problem here... i need to force quit programs when it is shutdown time...

Impossible to unlock network-admin, services, users and groups

Hi all,
it is impossible to unlock network-admin, services, users and groups in gnome.
Suggestions or ideas?
Thanks in advance
Greets

alessandro_ufms wrote:
xaiviax wrote:Just fyi, rebuilding system-tools-backends with ABS does not fix issue for me.
Are you put your login user on group stb-admin, put stbd in DAEMONS on rc.conf and restart the computer?
yes, although didn't have stbd in DAEMONS before (worked fine), still didn't fix issue. Been watching this thread, just downgraded package again, works great. I'd rather not downgrade on principal, but that the only thing that works for me currently, so...

[SOLVED] auto-logout of tty1 after logout of desktop env. possible?

I don't know if I am missing something...
I have recently posted here about running X with different screen solutions: https://bbs.archlinux.org/viewtopic.php?id=191255
I now added the auto-login configuration described here and that helps, except that when I logout, I am stuck at the tty1 console again as opposed to going straight back into auto-login and starting X. I know it's just a simple Ctrl+D to logout of the console, but I would prefer to:
- logout of desktop environment
- tty1 auto-logout
- tty1 auto-login
Is there a way to do this?
Last edited by drtebi (2015-01-10 23:48:18)

Trilby wrote:
We know what the issue is - but how you start X determines what will happen when it is done. If you use the exec command as advised, you will be logged out of the tty as soon as X exits, and as you've set up autologin, you will be immediately logged back in. I have this set up here - it works.
But hey, if you're so sure your problem couldn't possibly be solved, I'll leave you to be unhappy.
Not in my nature to be unhappy
So let me try to give you all the details of my setup:
I have setup autologin to the console, as described in Automatic login to virtual console.
Once logged in at the console, ~/.bash_profile starts my desktop environment Enlightenment.
Here is my ~/.bash_profile:
# ~/.bash_profile
# If not running interactively, don't do anything
[[ $- != *i* ]] && return
# prompt
export PS1='[\u@\h \W]\$ '
# Auto-login to Enlightenment
if [[ -z $DISPLAY && $XDG_VTNR -eq 1 ]]
then
# set default GUI browser
export BROWSER=firefox
# get RESOLUTION
source ~/.RESOLUTION
export RESOLUTION=$RESOLUTION
# startx with xorg.conf file according to $RESOLUTION
if [ $RESOLUTION = 'lowres' ]
then
echo "starting low-res setup"
startx -- -config xorg.conf-2k
else
echo "starting hi-res setup"
startx -- -config xorg.conf
fi
fi
As you can see, I have two different xorg.conf files, one (/etc/X11/xorg.conf) sets up my four-monitor xinerama display, the other (/etc/X11/xorg.conf-2k) sets up a "normal" HD resolution display. These both work as expected.
The file ~/.RESOLUTION simply contains this:
RESOLUTION=hires
~/.bash_profile sources this file and sets the environment variable RESOLUTION, which is then used by ~/.xinitrc
My ~/.xinitrc file contains the following:
#!/bin/sh
# ~/.xinitrc
# Arch Linux Default
if [ -d /etc/X11/xinit/xinitrc.d ]; then
for f in /etc/X11/xinit/xinitrc.d/*; do
[ -x "$f" ] && . "$f"
done
unset f
fi
# start Enlightenment according to the
# environment variable RESOLUTION
if [ $RESOLUTION = 'lowres' ]
then
exec enlightenment_start
else
exec enlightenment_start -fake-xinerama-screen 3840x2400+0+0
fi
I have created a script called resw that looks like this:
#!/usr/bin/bash
# @author: [email protected]
# @since: 2015-01-09
# @version: 0.1
# @bugs: Works but should really also logout of tty1
# Script that pops up a zenity list menu
# with a 'lowres' and 'hires' option. When
# either is selected and 'OK' is clicked, the file '~/.RESOLUTION'
# will change it's 'RESOLUTION' value to the one chosen, and
# Enlightenment exits
# Now .bash_profile and .xinitrc can use the RESOLUTION value
# to act accordingly.
RESOLUTION=`zenity \
--title="Choose Resolution" \
--width=680 --height=230 \
--list --column="Variable" --column="Description" \
hires "Switch to high resolution [3840x2400]" \
lowres "Switch to low resolution [1920x1200]"`
if [[ $RESOLUTION = 'hires' ]]
then
sed -i s/lowres/hires/ ~/.RESOLUTION
enlightenment_remote -exit
elif [[ $RESOLUTION = 'lowres' ]]
then
sed -i s/hires/lowres/ ~/.RESOLUTION
enlightenment_remote -exit
else
exit 0
fi
As you can probably make out from the comments in that file, this is what happens when I run the script:
- A window with a selection-list pops up where I can choose "hires" or "lowres"
- When I choose either of these, the script rewrites the file ~/.RESOLUTION accordingly
- The script calls Enlightenment's "exit" function, which shuts down Enlightenment
- Restarting Enlightenment now will have ~/.bash_profile and ~/.xinitrc use the value that's set in ~/.RESOLUTION to start Enlightenment with the corresponding xorg.conf or xorg.conf-2k file
Everything works as expected, but what I am trying to accomplish is, that Enlightenment will automatically restart after I use the script above.
A manual logout does that once back at the console (tty1). But I can not seem to trigger that logout from the script.
In other words, everything works as expected, but after the script runs and Enlightenment exits, I have to manually do Ctrl+D to logout, which in turn does the automatic login again.
I know it may sound a bit overkill... but it would really be nice to get this working.
In case you wonder: running a custom xrandr command or script does not work in my case. It did before, when I was running Enlightenment e17, but apparently they changed something—once Enlightenment is in xinerama mode, it stays there, no matter what xrandr sets. I have tried that before, but it didn't work and that's why I came up with the more complicated solution above which uses two different xorg.conf files and a conditional startup command for startx and enlightenment_start
I hope it all makes sense, I would really be happy to find a solution for this...

Please help block my ipod touch second generation and forget the code, try putting the code so many times that now says connect to itunes, I connect but will not let me do anything that tells me this should unlock with key and I should do for Please help!

please helpme i block my ipod touch second generation and forget the code, try putting the code so many times that now says connect to itunes, I connect but will not let me do anything that tells me this should unlock with key and I should do for Please help!. thanks

Place the iPOd in recovery mode and then restore. For recovery mode:
iPhone and iPod touch: Unable to update or restore

I have 2 ipod touches. I backed up the new one with old's info. The old one will not unlock with the password I had wrote down and I tried my new ones password. How can I reset the old ipod without affecting the new one and how can I unlock the old one?

I have 2 ipod touches. I backed up the new one with old's info. The old one will not unlock with the password I had wrote down and I tried my new ones password. How can I reset the old ipod without affecting the new one and how can I unlock the old one?

Place the iOS device in Recovery Mode and then connect to your computer and restore via iTunes. The iPod will be erased.
iOS: Wrong passcode results in red disabled screen
If recovery mode does not work try DFU mode.
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
For how to restore:
iTunes: Restoring iOS software

Unlock with Admin to Auto-Logout

Similar Messages

Maybe you are looking for