[Date Prev] [Date Index] [Date Next] [Thread Prev] [Thread Index] [Thread Next]

user restrictions don't work for console?

Michael Redinger Michael.Redinger@uibk.ac.at
Thu, 19 Aug 2004 03:22:39 -0700 (PDT)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I do not seem to be able to change the rw and ro values on a per host
basis. I suppose it is something trivial, but I just cannot see it ...

The default * settings do work correctly (if I remove a user, it really
cannot access the console any longer).
But if I add an extra rw and ro for a console, this is ignored. I am
still able to access the console when I am in the global (rw) user list
but not in that of the console.

See below for a short version of my setup.

Thanks,
Michael

conserver.passwd (conserver compiled with --with-pam):
*any*:*passwd*



conserver.cf:
group aaa {
	users u1, u2, u3;
}
group bbb {
	users *, !aaa;
}
default * {
	rw aaa;
	ro bbb;
	...
}
console ca {
	port 1;
	include casssh;
	host termserv;
~        rw u4, u5, u6;
~        ro "";
}





- --
Michael Redinger
Zentraler Informatikdienst (Computer Centre)
Universitaet Innsbruck
Technikerstrasse 13                     Tel.: ++43 512 507 2335
6020 Innsbruck                          Fax.: ++43 512 507 2944
Austria                                 Mail: Michael.Redinger@uibk.ac.at
BB98 D2FE 0F2C 2658 3780  3CB1 0FD7 A9D9 65C2 C11D
http://www.uibk.ac.at/~c102mr/mred-pubkey.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBJH9rD9ep2WXCwR0RAkIcAJ9Koxj4c+EKBuf9PKHaSeejZfPLrQCgr6yo
z7Hp+FJr4tXBE3A0cYTmBGU=
=+ce4
-----END PGP SIGNATURE-----