[mod.computers.vax] limit interactive users

art@MITRE.ARPA.UUCP (03/03/87)

You can write your own program that is run from SYS$SYLOGIN.  It can check the
number of users and system load and ... if the user does not meet with your
satisfaction you can hangup on him and drop the session.  The program
could even be written as a command procedure.

I have seen it done to:
1)only allow a certain number of interactive sessions from a specific group
of users
2)to limit number of simultaneous login's when the system was busy

Yes, if you do not do it correctly it is possible to bypass the check
and get logged in anyway.  But it is a good method to basically cut down 
on the number of users.

 
     
*
*---Art
*
*Arthur T. McClinton Jr.     ARPA: ART@MITRE.ARPA
*Mitre Corporation MS-Z305   Phone: 703-883-6356
*1820 Dolley Madison Blvd    Internal Mitre: ART@MWVMS or M10319@MWVM
*McLean, Va. 22102           DECUS DCS: MCCLINTON
*

  =-=- This note is in response to yours which follows -=-=

Hello readers,
the number of interactive users has sometimes to be limitted due to
various reasons. The usual way to do that is " SET LOGIN/INTERACTIVE = n "
On the other hand you have some users, which must be able to
bypass this limitation and yet not have other than the default privileges.
The only way to do that without involving the operators or the system manager
is to give these UICs the OPER privilege, which is really too much.  Is there
any other workaround than writing and installing a privileged program?
Thank you for your hints.

Peter Kobe
Physikalisches Institut der Universitaet Bonn

EARN/BITNET:    SYSTEM@DBNPIB5

SYSTEM@DBNPIB5.BITNET.UUCP (03/03/87)

Hello readers,
the number of interactive users has sometimes to be limitted due to
various reasons. The usual way to do that is " SET LOGIN/INTERACTIVE = n "
On the other hand you have some users, which must be able to
bypass this limitation and yet not have other than the default privileges.
The only way to do that without involving the operators or the system manager
is to give these UICs the OPER privilege, which is really too much.  Is there
any other workaround than writing and installing a privileged program?
Thank you for your hints.

Peter Kobe
Physikalisches Institut der Universitaet Bonn

EARN/BITNET:    SYSTEM@DBNPIB5