Restricting Root Login

[slgordon]

Does anyone know how to restrict root from logging in?
I want to force people to su to root and not log in as root so that I can track it with the sulog. Says the Manager to the person that invented the modem: "Tell me again why you need two prototypes?!?"

 

[PSD]

slgordon,

To turn rlogin off for the root user use:

chuser rlogin=false root

N.B. this changes rlogin to false in the root stanza in /etc/security/user

You can then only logon to the system console as root directly, from every other telnet session it means you have to su. This will then provide the sulog tracability you require.

Cheers

PSD
HACMP Specialist

 

[slgordon]

Thanks PSD! That works great! Says the Manager to the person that invented the modem: "Tell me again why you need two prototypes?!?"

 

[sendhilk]

This can be done through smit too.

use smit user

select the option change/show charecteristic of user

select the user root

mark user can login option to false.

then this will let u to login as only any other user and su to root

cheers
SendhilK