Limit user to login from different ip adress in same time?

mkp · 08-13-2015, 03:23 AM

Hi,

Is it possible to block certain user to login in debian server from different ip adress in same time?

Thanks.

HMW · 08-13-2015, 05:35 AM

Quote:

Originally Posted by mkp

Hi,

Is it possible to block certain user to login in debian server from different ip adress in same time?

Thanks.

Yup. It is: http://www.cyberciti.biz/faq/iptable...-limits-howto/

mkp · 08-13-2015, 06:27 AM

Hm, maybe i didn't explain very well. I have local server with specific software. Users connect to this server by putty and they can work with theirs accounts from different pc's. But this software has license witch allow to connect only from 1 pc at time. I want to block certain account to login at same time from 2 difference ip adress. I read how to block user with limits.conf but this is useless for me.

Habitual · 08-13-2015, 09:13 AM

Quote:

Originally Posted by mkp

But this software has license witch allow to connect only from 1 pc at time. I want to block certain account to login at same time from 2 difference ip adress.

So, it's a single-use only system?
If you want to block 'certain account' from 2 IPs, talk to them. Tell them it's a single-use system and they're holding up some one else's work with 2 sessions from 2 IPs.

sundialsvcs · 08-13-2015, 12:03 PM

It superficially seems to me that the right way to approach this would be through a PAM (Pluggable Authentication Modules) module, but I do not readily see one in the list. Perhaps a new one could be written.

mkp · 08-14-2015, 01:03 AM

Quote:

Originally Posted by Habitual

So, it's a single-use only system?
If you want to block 'certain account' from 2 IPs, talk to them. Tell them it's a single-use system and they're holding up some one else's work with 2 sessions from 2 IPs.

They forget to logout from first pc and login from second pc with same account. I want to prevent that, but maybe this is imposible.

It's easy with limits.conf, but it's not solution for me.

Habitual · 08-14-2015, 07:35 AM

Sad that the program/utility/whatever doesn't have an idle-check and logs them out automatically.
I think the issue could be solved by user "education".

tux111 · 08-15-2015, 01:22 AM

Maybe you want to use something like this http://chris-blog.net/2015/08/users-...imultaneously/ as a cronjob and terminate sessions with multiple logins.

JaseP · 08-16-2015, 02:45 PM

You are aware that if they are logging in from 2 separate machines on a NAT that you will only see the external IP address, right??!?! If what you are doing is checking for the IP address, it wouldn't solve that problem,... only the problem of them logging in from two different locations.