Disable Concurrent User Login

Forum|Forum|11 years ago
May 15, 2014
4 replies
20046 views

Hi! Good day to all! I wanted to ask the community if there is a way to disable concurrent logins of users. I know that its possible to have this with the ADMIN account. But is it also possible for regular users? If it is possible, how would a user logout from a device or computer and log in into a different one? Thank you in advance! Blessings! UPDATE: Found the solution, please close topic. Thnx!

ede_pfau

SuperUser

hi, would you care to share?

DarwinPHAuthor

New Member

More than happy to! There are two ways that you can do this, either specifying the setting on the user group or on the user itself. Here are the settings:

set auth-concurrent-override enable  set auth-concurrent-value 1

Here is the link with regards to the command:! FortiOS CLI Referencel Good day all!

AndreaSoliva

New Member

Hi be careful because in the CLI is mentioned : set auth-concurrent-value 1 " Set the number of concurrent logins permitted from the !!!!!SAME IP!!!!! address. Range 1 to 100. 0 means no limit. This field is available if auth-concurrentoverride" is enabled. Hope this helps have fun Andrea

ede_pfau

SuperUser

Thanks for sharing. Just a thought: Imagine coming from a NATted subnet. Restricting user logins from the same source IP might be more painful in this case than expected.

aagrafi

New Member

DarwinPH, allow me to disagree. The "set auth-concurrent-value xx" does NOT restrict the concurrent user logon. It restricts the concurrent logon from the same IP. I understand that you require to restrict the concurrent user logon e.g. the concurrent logon with the same username. This should be achieved by the "set admin-concurrent disable" I think.

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded