LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 06-06-2006, 08:45 AM   #1
tuxhats
Member
 
Registered: Dec 2005
Location: Austin, Texas area
Distribution: I have multiple Distos available, but I mostly use Ubuntu.
Posts: 47

Rep: Reputation: 16
Question ssh limit setting


How can I limit "users" to secure shell "logging on" to only 1 remote address at a time?
Object: Prevent users(cooperative students) from copying/pasting work from one to another.

Last edited by tuxhats; 06-06-2006 at 10:41 AM.
 
Old 06-06-2006, 01:58 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
How can I limit "users" to secure shell "logging on" to only 1 remote address at a time? Object: Prevent users(cooperative students) from copying/pasting work from one to another.
I think that's a flawed method. Like what if they're behind the same IP address?.. BTW, I think you're overlooking email, portable media, scanners, photocopiers, writing, cams. Closing one hole is a good way to force them to open up another can of ingenuity.

IMNSHO user separation and DAC permissions are nothing compared to good old reading & comparing results.
 
Old 06-06-2006, 05:10 PM   #3
tuxhats
Member
 
Registered: Dec 2005
Location: Austin, Texas area
Distribution: I have multiple Distos available, but I mostly use Ubuntu.
Posts: 47

Original Poster
Rep: Reputation: 16
Cool more info on ssh limit setting

I need to have this setting in ssh, bash, or whatever. Let me explain:

I teach C++ and Java in a public school here in the States. All 25 of my computer hard drives are unplugged(contains Windows XP), by my design. This keeps them on task in a controlled Linux environment. I also block the Internet from their use. A libability issue, CYA. There is no need for Internet use in my classroom curriculum. Besides, I just want them to use Linux!

I have created my own version of a Knoppix based Live CD (called No-Games_Knoppix.iso). We use it entirely in my classroom. Each student uses this Live Cd and "secure shells" onto my local (my classroom) Fedora C4 box, inside the same school system(DHCP). I'm the admin for this box. Students are their own "user" and "group" on this Fedora box with no read or write ability to any of the other users or groups. All 25 classroom computers are on the same school DHCP system in my classroom. I have no school system admin authority beyond what I have described here. The school system is entirely Microsoft.

Problem: Is there a way to limit, by script or other means, users from logging into more than one(1)user account at a time? ... Example: Two students cooperate and both of them login to their own accounts, on the same X-window(screen). They can copy and paste one to the other. One student can do one piece of work and the other another piece. What if more than two or many cooperate in this scheme?

Needs: By virtue of this problem, I need a solution that I can "burn" onto my own "No-Games iso" or a perhaps a setting I can use on the Fedora box.

Thanks to all who have read this, have a great day!

Last edited by tuxhats; 07-22-2006 at 08:40 AM.
 
Old 06-08-2006, 06:26 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Would have been more efficient posting detail up front, but OK. I prolly am thick since I still don't dig what provides their shared whatever session, but OK. Maybe look at /etc/security/limits.conf, like "maxlogins". Note this probably isn't "1" but a bit more. You'll have to experiment.
 
Old 07-18-2006, 02:42 PM   #5
tuxhats
Member
 
Registered: Dec 2005
Location: Austin, Texas area
Distribution: I have multiple Distos available, but I mostly use Ubuntu.
Posts: 47

Original Poster
Rep: Reputation: 16
ssh limit any user to 1 login at a time

A repost if your will:

How can I limit any user, and there can be many users logged in at one time, to only one shell login per IP address? All users are on a local DHCP assigned IP addressing.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
limit access to SSH server by IP nick1 SUSE / openSUSE 6 03-29-2005 04:36 PM
Purpose of setting a soft limit ? vmniza Linux - General 1 03-11-2004 07:37 AM
limit directory access for ssh account spammity Linux - Security 2 02-02-2003 12:36 PM
SSH Q - How to limit access to certain directory Lexx Linux - Networking 1 03-06-2002 05:20 PM
Setting bandwidth limit.. Q25 Linux - Networking 4 07-29-2001 07:51 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 09:34 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration