Disabled visuallogin: how do I disable the GUI login?

Open forum for security issues and info.
Forum rules
Any posts concerning pirated software or offering to buy/sell/trade commercial software are subject to removal.
Cat
Posts: 38
Joined: Wed Jul 05, 2006 1:15 pm

Disabled visuallogin: how do I disable the GUI login?

Unread postby Cat » Tue Sep 26, 2006 3:04 pm

What is the GUI login process? xdm?

pam_tally doesn't work for GUI logins, so I can't do account lockouts if users are logging in through the X-Windows prompt.

How do I force the system to a command prompt login, and then allow the user to start the window system? (startx?)

Thanks!

User avatar
recondas
Moderator
Moderator
Posts: 5441
Joined: Sun Jun 06, 2004 5:55 pm
Location: NC - USA

Unread postby recondas » Tue Sep 26, 2006 3:11 pm

Have you tried chkconfig visuallogin off as root? <take a look at man visualogin, man clogin and man login to get an idea of what effect it'll have>.

Cat
Posts: 38
Joined: Wed Jul 05, 2006 1:15 pm

Unread postby Cat » Tue Sep 26, 2006 3:41 pm

Yes, I used chkconfig visuallogin off to get the simple xdm login screen. I don't want even that; I just want the normal login prompt.

If I chkconfig windowsystem off, the command prompt just says "The system is ready." but goes no further.

User avatar
VenomousPinecone
Posts: 2141
Joined: Mon Jun 20, 2005 2:10 pm
Location: Groom Lake, NV

Unread postby VenomousPinecone » Tue Sep 26, 2006 3:57 pm

Cat wrote:Yes, I used chkconfig visuallogin off to get the simple xdm login screen. I don't want even that; I just want the normal login prompt.


You mean with no X whatsoever? just a terminal with blinking cursor?

Cat
Posts: 38
Joined: Wed Jul 05, 2006 1:15 pm

Unread postby Cat » Tue Sep 26, 2006 4:02 pm

Preferably. Without Trusted Irix, getting this machine to pass this security guy's requirements is a huge pain.

In IRIX 6.5.27, login/rsh/rlogin/telnet can make use of the
pam_tally module to maintain a count of unsuccessful login and
deny access if too many attempts fail.


pam_tally is the only way I know of to lockout an account after too many failed login attempts.

Cat
Posts: 38
Joined: Wed Jul 05, 2006 1:15 pm

Unread postby Cat » Tue Sep 26, 2006 4:08 pm

investigating the LOCKOUT= option in /etc/default/login
hopefully this catches GUI logins

User avatar
josehill
Moderator
Moderator
Posts: 3305
Joined: Mon Jun 06, 2005 9:53 pm
Location: New England, USA
Contact:

Unread postby josehill » Tue Sep 26, 2006 4:54 pm

Have you tried "chkconfig xdm off" as root, followed by either a reboot or manually running the xdm shutdown script in /etc/init.d?

Cat
Posts: 38
Joined: Wed Jul 05, 2006 1:15 pm

Unread postby Cat » Tue Sep 26, 2006 5:00 pm

I turned off xdm as well, with no success. /etc/default/login's LOCKOUT works for now, but I'd really like to know how to force this Octane2 to only use login.


Return to “SGI: Security”

Who is online

Users browsing this forum: No registered users and 1 guest