Terminating Users immediately

Hi, I have a little question. We have a user who isn't obeying the rules, and we want to terminate her account. Now we have taken her out of the roles file which means she won't be able to log on, BUT she is already logged-in in the TeamSite GUI. How can we terminate her with immediate effect?

[She's not "physically" on the server, and there seems to be no trace of a Unix process for her that I could kill. What we thought of was a) do an iwreset which would "blip" the user back to the login screen (but this would affect everyone), or b) remove her from our workflow user list, so she won't be able to work via our workflows]

Find more posts tagged with

Comments

Frederik

I don't think iwreset (even -a) would do the trick. I did a lot of iwreset -a just yesterday, when reworking the submit.cfg file, and in my memory, I did not have to re-login on the server.

did you try beating her with a stick

or you could take a look at IWHOME/bin/iwuser or iwrmuser.ipl

Frederik

mmm, maybe iwreset would do the trick, since you changed the role files. I overlooked that. Still I would prefer empirical evidence before being sure that this would terminate an existing user session ;-)

Migrateduser

There is the iwsessionkeygen command, but I think that invalidates all sessions, there does not seem to be a param for a specific user (seems like there should be).

smenon

Running iwreset with no switches like -a or -u should not blip everyone back to the login screen. Running iwreset allows the server to pick up the new configuration settings including refreshing its cache of users and roles. In any case, the server also periodically checks to see if any of the roles files have changed (based on timestamp) and it will refresh its cache even if you do not issue an "iwreset". In addition, the server checks to see if the user that is requesting the operation (either from the UI or from the command line) is a valid TeamSite user and so this particular user should not be able to run any operation on the system even if they are logged in through the UI.

thanks

--Sunil Menon
Product Manager
Interwoven, Inc.