[Samba] Authentication hook to run extra checks before allowing Windows login

[spindles seven]

On 30 August 2024 17:13 Sebastian Arcus wrote:
> 
> Hello all. Does Samba in AD mode provide any sort hooks to run a script
> when a user attempts to login, before replying to the authentication
> attempt? I need to prevent certain users from being logged in from more
> than one machine at the same time, and a script to check the username or
> account against a previously saved record of which machine they last
> logged in from and reject the authentication attempt might be able to
> accomplish this. Any ideas much appreciated.
> 
> Sebastian

I don't think samba has any means to do this, and it's not built-in to AD, but take a look at this article for Windows client machines:  
https://learn.microsoft.com/en-us/archive/technet-wiki/37839.active-directory-limit-concurrent-user-logins?WT.mc_id=email

HTH,

Spindles7