how to allow access for a single user only from a specific host/IP

[ogniemi]

the other users in the system should have no change (should be able login from any hosts)

thx,rm.

 

[DukeSSD]

What sort of login?
What sort of host?
And why?

If you want them to only be able to log in from another AIX host, via telnet - what would stop them telnetting into that other host and then on to the second machine?

Or would that be allowed?

 

[khalidaaa]

Easy way i can think of (if he is telnetting to the machine) is to include a script in his .profile to make sure that he is logging from the specified IP. If not then logs him out.

Regards,
Khalid

 

[RMGBELGIUM]

you could set up Ipsec , that allows packet filtering based on ip's

rgds,

R.

 

[khalidaaa]

Thanks RMGBELGIUM

I'm not sure of the IPsec in AIX but in Windows IPsec is an encryption technology.

and for setting the IPsec, both machines should be talking in IPsec language i believe!

You made me interested in reading about IPsec in AIX. Do you have a document saying that?

Regards,
Khalid

 

[RMGBELGIUM]

I believe that IPSec in AIX is IP security, which filters traffic based on rules you define.Think it can be used to set up AIX as a firewall.-> smitty tcpip -> configure IP security.Just have a look around,perhaps it will offer you the solution you're looking for.

rgds,


R.