User authentication tracing

[Andrew Bartlett]

You can setup samba to prod the client every now and then, if this
causes a broken pipe, then the user probably turned their machine off. 
See the keeplive section fo the smb.conf manpage for details.

You should also look into the --with-utmp option, as this writes the
information to the standard unix files for these things.  (Use w and
last to see the output).

The other option is too use PAM session support, due (I hope) in the
next release of samba 2.2, to run standard PAM modules for the task.  

Andrew Bartlett

davide.dozza at yacme.com wrote:
> 
> Hi Don,
> 
> this is really an useful tip, but how would you solve the problem
> for people who switch off the PC without disconnecting from
> the network?
> 
> Ciao
> 
> Davide
> 
> "MCCALL,DON (HP-USA,ex1)" wrote:
> >
> > Hi Davide,
> > Samba is not really set up yet for 'auditing' services, which is what I
> > think you're
> > kinda looking for;
> > HOWEVER, take a look at the 'pre-exec' and post-exec' options for the
> > smb.conf file in the
> > smb.conf man page;  you can configure these to execute a program or script
> > that would write
> > to a file or database when the user logs in, and when he logs out, and use
> > the resulting information to determine access to your other services if you
> > like...
> > Hope this helps,
> > Don
> >
> > -----Original Message-----
> > From: Davide Dozza [mailto:davide.dozza at yacme.com]
> > Sent: Sunday, April 15, 2001 10:31 AM
> > To: samba at lists.samba.org
> > Subject: User authentication tracing
> >
> > Is it possible to trace Samba authenticated user?
> >
> > That is, after a user has been authenticated versus a Samba acting
> > as PDC, is it possible to know if such user is still connected to the
> > Microsoft
> > network or they have been disconnected?
> > What I would like to do is to use Samba as authentication server in
> > order
> > to grant the access to other services (for example Internet navigation
> > through a proxy) and remove the access when such user disconnects
> > from the network.
> >
> > Davide
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Andrew Bartlett
abartlet at pcug.org.au