Very Computer

by **Kevin Crittendo** » Fri, 27 Oct 2000 21:21:09

How can I limit the number of sessions that any one user can initiate simultaneously?

by **Nick Andr** » Fri, 27 Oct 2000 23:01:09

>How can I limit the number of sessions that any one user can initiate =
>simultaneously?

We're talking concurrent login sessions on a shell server, right? :-)

Nick.
--
Pacific Internet SP4 Fax: +61-2-9247-4738 Voice: 03-9674-7543
http://www.zeta.org.au/~nick/
"Sorry to say this, but the job falls to the ultimate defenders
of liberty - you and me." [Keith Henson, 2000-06-29]

by **Kevin Crittendo** » Fri, 27 Oct 2000 23:27:52

Yes, on HPUX 10.2.

> >How can I limit the number of sessions that any one user can initiate =
> >simultaneously?

> We're talking concurrent login sessions on a shell server, right? :-)

> Nick.
> --
> Pacific Internet SP4 Fax: +61-2-9247-4738 Voice:
03-9674-7543
> http://www.zeta.org.au/~nick/
> "Sorry to say this, but the job falls to the ultimate defenders
> of liberty - you and me." [Keith Henson, 2000-06-29]

by **Angry Bo** » Sat, 28 Oct 2000 02:50:34

this is a Kevin Crittendon scroll! it says:

Quote:> How can I limit the number of sessions that any one user can initiate simultaneously?

try a:

man 2 setrlimit

if that does work, try a:

man -k limit

and see if anything looks helpful.

--
AngryBob
if i were a rom construct, would a lexical closure be my womb?
--nicholas black (from git.personals)

by **Nick Andr** » Sat, 28 Oct 2000 20:32:10

>> >How can I limit the number of sessions that any one user can initiate =
>> >simultaneously?
>> We're talking concurrent login sessions on a shell server, right? :-)
>Yes, on HPUX 10.2.

Pretty damn difficult if they have shell access and write access on
a directory on a filesystem which permits execution. They could run
their own sshd listening on a non-privileged port, or "screen" and
have a few terminal windows open simultaneously. They might even run
a multiplexling protocol through the (e.g.) single shell session you
permit. You would have to firewall off non-privileged ports, which might
render your server useless, turn off write access and execute privilege,
which might also defeat the purpose of allowing access in the first place,
or run a different shell per user. You might decrease the per-user
process limit, but this might also reduce functionality beyond an
acceptable point.

On the other hand, why even bother making such a restriction?

Nick.
--
Pacific Internet SP4 Fax: +61-2-9247-4738 Voice: 03-9674-7543
http://www.zeta.org.au/~nick/
"Sorry to say this, but the job falls to the ultimate defenders
of liberty - you and me." [Keith Henson, 2000-06-29]

by **Norman Levi** » Sun, 29 Oct 2000 06:03:59

Yes, this can be done in AIX also with a user written
routine that is specified in /etc/security/user
in the "auth1" statement.

> Yes, on HPUX 10.2.

> > >How can I limit the number of sessions that any one user can initiate =
> > >simultaneously?

> > We're talking concurrent login sessions on a shell server, right? :-)

> > Nick.
> > --
> > Pacific Internet SP4 Fax: +61-2-9247-4738 Voice:
> 03-9674-7543
> > http://www.zeta.org.au/~nick/
> > "Sorry to say this, but the job falls to the ultimate defenders
> > of liberty - you and me." [Keith Henson, 2000-06-29]

--
Norman Levin

Very Computer

limit simultanious sessions

limit simultanious sessions

limit simultanious sessions

limit simultanious sessions

limit simultanious sessions

limit simultanious sessions

limit simultanious sessions