Re: How to Restrict a user, not a root, Login to the Console?

>
>
>I need a restrict user (oracle for exemple) login to the console. With a superuser root, edit the 
/etc/default/login file, but with a user???? 
>
>I want that any users who try to remotely log in to this system must first log in with their perso
nal user login, and then use the su command to become a application user.
>
>I'm working on Solaris 8, and don't want implementation a RBAC solution.

Why not?


RBAC allows you to convert accounts into roles:


 # This uses a bug in Solaris 8/9 rolemod; the syntax in S10 is:
 # usermod -K type=role roleuser
 rolemod -A '' roleuser

 # Then give the users who need to su to roleusr, roleuser as a role:
 usermod -R roleuser user1


They still need to share the password.


Casper