Is there a way to bind a user ID to a specififed IP address? We have wireless scanners with static IPs that we would like to do this on. For example, we have a scanner with an ip address of 10.0.0.1 and we only want user f01 to log into that scanner. The scanners use telnet to get into our server, so the user ID's are in the redhat server's Users and Groups file.

Is there something I can do with the user's .bash_profile to do this?


Thanks!

Having a fixed IP is dependant on the network card, not a specific user name.

Wireless and Telnet huh ? that's a pretty insecure combination for sure..

Have you considered ssh on the clients using certificates, and requireing a password to authenticate ?
Each scanner could have a different cert, and each user would know the pass for their cert, and would be unable to login from a different device..

your description of what you are trying to accomplish is a bit muddled so I may have missed the point..

farslayer,

Thanks for your reply. The security isnt a concern based on the information being sent wireless. Here is a little rundown of what I am trying to accomplish:

On our RHEL3 server we have several usernames in the form of F01xx and a password. We have forklifts in the warehouse that have wireless barcode scanners with static IP addresses. In order to user the scanner, the user must scan the user name and password barcode card that is physically fastened to the truck (the F01xx and its corresponding password). Then we use the username's .bash_profile to run the application at login. Now each truck has a unique username and password card which allows us to track changes back to a particular truck. However, a user can scan another truck's card which causes us to think changes are being made on another truck. So what I would like to do is only allow one particular IP address to login under the username that we want. Can this be done? I dont know much about the .bash_profile file, but I was thining I could do an if/then statement in it such as:

if ip address = 10.0.0.2
then run /xxx/xxx/xxx
else logoff

obviously that terminology is wrong but you get the idea.

Thanks.