Tracking users logging in and out
Yan Seiner
yan at cardinalengineering.com
Thu Jan 24 06:41:33 GMT 2002
Andrew Bartlett wrote:
>Yan Seiner wrote:
>
>>Andrew Bartlett wrote:
>>
>>>Yan Seiner wrote:
>>>
>>>>1) compile with --with-utmp, then track that.
>>>>2) use preexec & postexec, and require users to log on to a specific
>>>>share. This may not work right, though.
>>>>
>>>>Good luck!
>>>>
>>>You can also compile --with-pam, and enable a pam sessions module to do
>>>the trick (obey pam restrictions = yes needs to be set in your smb.conf
>>>as well).
>>>
>>My understanding, though, is that this will require win clients to log
>>in with unencrypted passwords. Is that not correct? I'd love to use
>>pam if I could, as I could do wonders with things like pam_warn and
>>pam_smb.
>>
>
>This is correct for Samba's traditional PAM support. I did some work on
>samba almost a year ago that allows samba to call on PAM's other
>features, including account managment and session tracking - even when
>we use encrypted passwords.
>
Hah! Is this documented anywhere? How do I enable this
"non-traditional" support? Do I need to do anything special in
smb.conf? Or is it just a matter of properly setting up the pam conf files?
Thanks,
--Yan
More information about the samba
mailing list