Re: Prevent remote User login

Noel,

Do you know which version of the Solaris OS that you are using?
If you are using the Solaris OS version 8 or newer, the 'oracle'
or '9ias' accounts may be configured to be roles.  By default,
you cannot remotely log into a system as a role - you must log
in as a normal user and then 'su' to a role.

For some introductory information on roles and the Solaris
Role-based Access Control capability see the Sun BluePrints
article titled:

    Role-based Access Control and Secure Shell
    http://www.sun.com/blueprints/0603/817-3062.pdf

You can also find more information on this capability in the
Sun documentation (System Administration Guide: Security
Services: Chapter 17 - Role-based Access Control Overview):

http://docs.sun.com/db/doc/806-4078/6jd6cjs3u?q=Role-based+Access+Control&a=view

Please let me know if you have any questions.

Glenn

---
Glenn M. Brunette, Jr.
Principal Engineer, Chief Security Architect
Sun Professional Services, United States CTO
Sun Microsystems, Inc.


Noel del Rosario wrote:
>  
> Glenn,
>  
>        Is there something that  could prevent a user to do a remote login
>        to another valid user_id account (say 'oracle' or '9ias' ) but  allows them 
>        to do 'su - oracle' or 'su - 9ias'  after they successfully login remotelly 
>        using their own user_id account ( say 'rosario' or 'watanabe' ). 
>  
> cheers,
> noel