How can i disable terminal access with opendirectory ?

I'm deploying of a OSX Server over OSX Mountain Lion... And i need to limit the terminal (command line) access.

Any suggestion ??


Thanks in advance,

W

Mac mini, OS X Mountain Lion (10.8.5)

Posted on Jan 12, 2015 7:49 AM

Reply
3 replies

Jan 14, 2015 2:37 AM in response to wvivanco

As Linc indicated setting an Open Directory account to have an invalid login shell will prevent the user from using Terminal. They will still be able to launch it but will not be able to do command line instructions nor double-click and run scripts, this effectively makes it unusable. You would do this setting using Workgroup Manager per user, it is possible to bulk apply this setting.


Alternative approaches would be to use MCX (Managed Preferences) to deny a user or group permission to run Terminal, or to do something similar via Profile Manager. (It appears that with Profile Manager rather than explicitly denying a particular application you have to grant access to desired applications and this implicitly means denying everything else, personally I find this approach to be bad and feel Apple should give the choice of both defining allowed applications and/or defining specific disallowed applications.)


I would not advise removing the Terminal application nor changing permissions on it.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How can i disable terminal access with opendirectory ?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.