How to disable remote login to AIX... 1

[restockton]

I know that you can place a file, either nologin, or nologon in a specific file system, and if that file is present, only logon from the console is allowed. I can not remember if it is nologin or nologon, and I can't remember where to put the file. I have done this before, and it works great, but I just had a brain fade and can't remember the details. X-) Not something you use everyday. If anyone can remember and tell me, I would appreciate it.

Thanks for your help.

 

[MikeLacey]

smit user

pick your user, set remote login allowed to false

That's the lazy way I know....
Mike
michael.j.lacey@ntlworld.com

 

[restockton]

What I need is to disable all remote login while I do maintenance to the machine without rebooting in single user mode. I don't want to just disable a particular user, but thanks for the info, I may use that for a different situation later.

 

[MikeLacey]

Oh I see.

I remember this, it was a standard feature in BSD, it was implemented in /etc/profile.

The logic in /etc/profile was something like this:

if the user is not root
if the file /etc/nologin exists
display a polite message and log the user out
fi
fi

Mike
michael.j.lacey@ntlworld.com

 

[Guest_imported]

Try this:
1. vi passwd
2. do the global change
:%s/\/bin\/ksh/\/dev\/null/g
3. for user root change it back to /bin/ksh !!!
Enjoy it.

 

[MikeLacey]

Moskwich412,

Wow -- that is *such* a scary thing to suggest....
Mike
michael.j.lacey@ntlworld.com

 

[Suza]

restockton - to implement what MikeLacey suggests above, simply type in the following command:

touch /etc/nologin

It creates the 'nologin' file in /etc which prohibits any login from anyone except root, it does not however kill off any current users - that's up to you - but it will prevent them from logging back in. When you're done simply remove the nologin file by typing

rm -i /etc/nologin (-i isn't required, just good practice)
No reboot is required.

 

[slgordon]

You can also edit the /etc/nologin file to display a message to the user when they try to login.
i.e. "System down for maintenance, please try again later"