login name restrictions

login name restrictions

Post by andy » Thu, 27 Feb 1997 04:00:00



re,
        I need a pointer for the restrictions on login names. I can't seem to
dig one up...

IE. have a user that wants to use 4sight as a login name...
Solaris 2.5.1

Such an easy question, so difficult an answer ;)

--------------
Andy

 
 
 

login name restrictions

Post by Fletcher.Gl.. » Thu, 27 Feb 1997 04:00:00



>re,
>    I need a pointer for the restrictions on login names. I can't seem to
>dig one up...

>IE. have a user that wants to use 4sight as a login name...
>Solaris 2.5.1

>Such an easy question, so difficult an answer ;)

>--------------
>Andy


An obvious limit, a username cannot contain the ':' character.  The
':' character is a field separator in the passwd file.

passwd(4) says that the name field in the passwd file should conform to the
checks performed by pwck(1).  I looked at the source for pwck(1) and it
tests for the following:

All characters in the name must test true by isalnum().
At least one character must be a lower case alpha.
There must be at least 1 and less than 8 total characters.



 
 
 

login name restrictions

Post by RP Pelletie » Thu, 27 Feb 1997 04:00:00


8 character limit
first character must be alphanumeric and lower case

RGDS,

rpp

 
 
 

1. Root login restrictions, without complete su restriction?

I'm trying to help a client beef up the previously lax security on their
AIX 4.1.4 system, and what I'd like to be able to do is something that
other UNIX operating systems allow, and I'm just having a bit of trouble
figuring out how to implement it on AIX.

I'd like to restrict anyone from logging in directly as "root" on all
terminals except for the console, but allow users in the "system" group
to "su" to root.  I've got this working with "rlogin" and "telnet" by
disallowing remote logins in root's security characteristics, but as
far as I've been able to figure out so far, restricting the terminals
is essentially an all-or-nothing proposition.

If I restrict root to "/dev/tty0", the console, not only can I not log
in as root anywhere else, but I also can't "su" to root, even though
I'm in the system group.

Is there some way to prevent a direct login as root, but still allow
"su" by authorized users?  Is there some concept of an "unsecure"
terminal?

Thanks for any suggestions!

        -Mike Pelletier.

2. Messing with environment from .init section

3. .htaccess restriction by subnet, not domain name

4. WYSE 60 emulation?

5. Operating system file name restrictions? Where?

6. Help: Routing table problem with Redhat 4.1 .

7. getting users login name after login from server

8. 2.5.7 fails compile on sched.c:1456

9. How do I get sendmail to use my real name in stead of my login name

10. how does /usr/bin/login get the login name?

11. Can't login with nis login name

12. problem: Login after AIX 5L install: login prompt reappears after entering user name

13. After entering login name, prompt returns to login