Re: Prevent remote User login
From: Glenn M. Brunette, Jr. (glenn.brunette_at_sun.com)
Date: 10/16/03
- Previous message: Hal Flynn: "New SecurityFocus articles"
- Next in thread: Blair Barrett: "Re: Prevent remote User login"
- Reply: Blair Barrett: "Re: Prevent remote User login"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 16 Oct 2003 15:38:08 -0400 To: Noel del Rosario <noeldelrosario@yahoo.com>
Noel,
Do you know which version of the Solaris OS that you are using?
If you are using the Solaris OS version 8 or newer, the 'oracle'
or '9ias' accounts may be configured to be roles. By default,
you cannot remotely log into a system as a role - you must log
in as a normal user and then 'su' to a role.
For some introductory information on roles and the Solaris
Role-based Access Control capability see the Sun BluePrints
article titled:
Role-based Access Control and Secure Shell
http://www.sun.com/blueprints/0603/817-3062.pdf
You can also find more information on this capability in the
Sun documentation (System Administration Guide: Security
Services: Chapter 17 - Role-based Access Control Overview):
http://docs.sun.com/db/doc/806-4078/6jd6cjs3u?q=Role-based+Access+Control&a=view
Please let me know if you have any questions.
Glenn
--- Glenn M. Brunette, Jr. Principal Engineer, Chief Security Architect Sun Professional Services, United States CTO Sun Microsystems, Inc. Noel del Rosario wrote: > > Glenn, > > Is there something that could prevent a user to do a remote login > to another valid user_id account (say 'oracle' or '9ias' ) but allows them > to do 'su - oracle' or 'su - 9ias' after they successfully login remotelly > using their own user_id account ( say 'rosario' or 'watanabe' ). > > cheers, > noel
- Previous message: Hal Flynn: "New SecurityFocus articles"
- Next in thread: Blair Barrett: "Re: Prevent remote User login"
- Reply: Blair Barrett: "Re: Prevent remote User login"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
