Disable user login after certain time of day

tkmsr · 12-04-2009, 10:03 AM

I want to know how can some one disable user login after certain time of day upto certain time that is lock the screen for some time.

rweaver · 12-04-2009, 10:51 AM

I don't know of any method to perform this kind of operation without customizing things a bit. For example you could use scripts to disable certain accounts at a certain time and re-enable them at a later time via crontab.

# m h dom mon dow command
0 18 0 0 0 cp /etc/shadow.nopasswd /etc/shadow
0 8 0 0 0 cp /etc/shadow.withpasswd /etc/shadow

You could also probably use account expiration to disable enable logins through a scripted process.

Jim Bengtson · 12-04-2009, 11:40 AM

Quote:

Originally Posted by tkmsr

I want to know how can some one disable user login after certain time of day upto certain time that is lock the screen for some time.

Use PAM and the pam_time module:

Quote:

The pam_time PAM module does not authenticate the user, but instead it restricts access to a system and or specific applications at various times of the day and on specific days or over various terminal lines. This module can be configured to deny access to (individual) users based on their name, the time of day, the day of week, the service they are applying for and their terminal from which they are making their request.

William.Herry · 12-17-2009, 11:01 PM

Quote:

Originally Posted by rweaver

I don't know of any method to perform this kind of operation without customizing things a bit. For example you could use scripts to disable certain accounts at a certain time and re-enable them at a later time via crontab.

# m h dom mon dow command
0 18 0 0 0 cp /etc/shadow.nopasswd /etc/shadow
0 8 0 0 0 cp /etc/shadow.withpasswd /etc/shadow

You could also probably use account expiration to disable enable logins through a scripted process.

passwd -l username
passwd -u username