-1

We have a special server with a running program that needs to be shared locally between multiple users one at a time. A thought I had as this is doable in Linux, is to authenticate as their AD user, but map to a special user on this server upon login.

Requirements:

  1. Only one user could be logged in at a time
  2. We need RBAC logins
  3. The program is running as a specific user
  4. The program can never be shutdown
  5. None of the users can login directly to the program's user account
  6. We cannot use RDP or VNC-like

Another way to say this is: I have an AD group that I would like to impersonate a single user. Anyone in this group can log in one at a time and not kill the running session and program.

Unfortunately, the software cannot be modified and does not have a web ui.

Is there a way to map users this way?

  • How do you expect several people using the software running on some server, if they can't connect remotely to it via RDP/VNC? – J-M Sep 23 '22 at 19:27
  • "shared locally between multiple users one at a time" This is a special server, not a traditional remote-only network server. I thought I was clear, I apologize. This server is administered by these users locally. The remote side is completely separate separate. – qc_234578909 Sep 23 '22 at 20:00

0 Answers0