Return to BSD News archive
Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!simtel!lll-winken.llnl.gov!enews.sgi.com!decwrl!elroy.jpl.nasa.gov!swrinde!howland.reston.ans.net!newsfeed.internetmci.com!news.sbt.net!usenet From: jim@sbt.net () Newsgroups: comp.unix.bsd.bsdi.misc Subject: Re: Users login through radius server Date: Mon, 09 Oct 1995 02:48:06 GMT Organization: SBT, Inc. Lines: 44 Message-ID: <45a28s$236@bob.sbt.net> References: <44el59$nuj@despina.neptune.com> <44nmhi$kej@mercury.texoma.com> NNTP-Posting-Host: pm1-144.sbt.net X-Newsreader: Forte Free Agent v0.46 vaden@texoma.com (Larry Vaden) wrote: >In article <44el59$nuj@despina.neptune.com>, tom@neptune.com says... >> >>Hi, >> >>Most of my users connect through PPP, and get authenticate from a >>radius server on a BSDI machien. In order for the users to be >>authenticate from the BSDI machine, they need an account on that >>machine, but by creating an account on the BSDI machine they can >>access the BSDI machine which I don't want. So I would like to create >>a "false shell", so that once logged into the BSDI machine itcloses >>the session. Does anybody knows how to do it? >> >>I will appreciate any help. >> >>Thanks, >> >>Tom >>tom@neptune.com >A zero length /usr/contrib/bin/zsh seems to work for us. >Your mileage may vary. >Larry You can try this: run adduser input the user name and password add the user to the user (or whatever directory) instead of giving the customer a /usr/home/customer directory, put them in a /usr/pppeverone directory for their shell type, assign /usr/bin/false this oughta do it for you. jim@sbt.net