Re: pam limits drops privileges

From: Tarhon-Onu Victor (mitucat_private)
Date: Thu Sep 06 2001 - 06:39:42 PDT

  • Next message: Lukasz Trabinski: "Re: pam limits drops privileges"

    On Thu, 6 Sep 2001, Lukasz Trabinski wrote:
    
    > Password:
    > Too many logins for 'test'.
    
    	First of all kill all the processes owned by test. Then let's make
    it step by step:
    
    # groupadd testgroup
    # useradd -g testgroup testuser
    # echo '@testgroup - maxlogins 3'>>/etc/security/limits.conf
    # ssh pulea@localhost
    pulea@localhost's password:
    Last login: Thu Sep  6 16:30:16 2001 from localhost.localdomain
    blackblue (pulea):~>telnet 0 -l testuser
    Trying 0.0.0.0...
    Connected to 0.
    Escape character is '^]'.
    Password:
    Last login: Thu Sep  6 16:32:33 from localhost.localdomain
    blackblue (pulea):~>id
    uid=504(pulea) gid=100(users) groups=508(testgroup)
    blackblue (pulea):~>id testuser
    uid=508(testuser) gid=508(testgroup) groups=508(testgroup)
    
    	Syslog messages:
    
    Sep  6 16:33:30 blackblue pam_limits[19558]: checking if testuser is in
    group testgroup
    Sep  6 16:33:30 blackblue  -- testuser[19558]: LOGIN ON pts/1 BY pulea
    FROM localhost.localdomain
    
    	You will obtain same results (logging in as testuser you will get
    pulea's shell) logging from console as testuser.
    
    -- 
    Tarhon-Onu Victor
    Network and System Engineer
    RDS Iasi - Network Operations Center
    Phone: +40-32-218385
    



    This archive was generated by hypermail 2b30 : Fri Sep 07 2001 - 09:13:27 PDT