Kicking Users

Verbal Kint · 11-02-2005, 05:20 PM

Hello,

[root@linux jeff]# w
18:23:53 up 6 days, 17:36, 3 users, load average: 0.08, 0.06, 0.01
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
root pts/1 on.xxxxxxx.com 12:46 0.00s 51.43s 0.02s w
root pts/2 on.xxxxxxx.com 12:48 1:47m 0.10s 0.10s -bash
ensabac pts/3 xxxxxxxxxx 18:23 3.00s 0.08s 0.08s -bash

I am new and was hoping somone can tell me how to boot a user (ensabac) that is logged in via ssh?

Thanks

TBC Cosmo · 11-02-2005, 05:27 PM

kill the pid associated with the bash session of the user.

Verbal Kint · 11-02-2005, 05:43 PM

Thanks but can someone tell me how to do that?

TBC Cosmo · 11-02-2005, 06:17 PM

You see that ensebac has psuedo terminal 3 pts/3. So do a ps -ef and filter for pts/3 and filter again for ssh. Then kill -9 the process id for that session.

1. ps -ef|grep pts/3|grep ssh
2. note the pid
3. kill -9 [pid]

OR

Code:

kill -9 `ps -ef|grep pts/3|grep [s]sh|awk '{print $2}'`

Verbal Kint · 11-02-2005, 06:49 PM

Great that worked using:

#kill -9 `ps -ef|grep pts/3|grep [s]sh|awk '{print $2}'`

Now one thing I am curious about---------->I tried the #1 you said to get the pid:

[root@linux ~]# ps -ef|grep pts/3|grep ssh
ensabac 23441 23439 0 19:52 ? 00:00:00 sshd: ensabac@pts/3
[root@linux ~]#

You said "note the pid" and just do a "#kill (pid)".......Where is the pid above?

Thanks!

TBC Cosmo · 11-02-2005, 07:33 PM

23441 would be the pid. If you do a plain old ps -ef, the top line will have a description of the fields

Code:

[radar@localhost ~]$ ps -ef
UID        PID  PPID  C STIME TTY          TIME CMD
root         1     0  0 Oct17 ?        00:00:00 init [5]
root         2     1  0 Oct17 ?        00:00:00 [ksoftirqd/0]
root         3     1  0 Oct17 ?        00:00:00 [events/0]
root         4     1  0 Oct17 ?        00:00:00 [khelper]

Verbal Kint · 11-02-2005, 08:29 PM

cool, thanks!