Re: Limit logins on a group of machines?

2009-06-18 Thread Bill Jonas
On Wed, Jun 17, 2009 at 01:43:35PM -0700, Lisa Kachold wrote: sLDAP will do this nicely. I really hate to be a pest, but I've been searching high and low with no luck. The closest I've found is this mailing list post for OpenLDAP, but it's from five years ago:

Limit logins on a group of machines?

2009-06-17 Thread Bill Jonas
Hi all, I was wondering if anybody might point me in the right direction here. I know that for limiting concurrent logins on a *single* machine, you can set maxlogins in /etc/security/limits.conf. However, this is only good for that single system. Suppose you have three machines (foo, bar, and

Re: Limit logins on a group of machines?

2009-06-17 Thread Charles Jones
Bill Jonas wrote: Hi all, I was wondering if anybody might point me in the right direction here. I know that for limiting concurrent logins on a *single* machine, you can set maxlogins in /etc/security/limits.conf. However, this is only good for that single system. Suppose you have three

Re: Limit logins on a group of machines?

2009-06-17 Thread Eric Shubert
Bill Jonas wrote: Hi all, I was wondering if anybody might point me in the right direction here. I know that for limiting concurrent logins on a *single* machine, you can set maxlogins in /etc/security/limits.conf. However, this is only good for that single system. Suppose you have

Re: Limit logins on a group of machines?

2009-06-17 Thread Lisa Kachold
sLDAP will do this nicely. What is your distro? You can even authenticate to active-directory and make the Windows staff field all user maintenance requests? On 6/17/09, Eric Shubert e...@shubes.net wrote: Bill Jonas wrote: Hi all, I was wondering if anybody might point me in the right

Re: Limit logins on a group of machines?

2009-06-17 Thread Bill Jonas
On Wed, Jun 17, 2009 at 11:31:39AM -0700, Charles Jones wrote: What if, you created a watchdog script that ran on a central machine, that every X seconds would ssh to all 3 machines and check for their login. and if it sees them login to one of the machines it locks their account and kills

Re: Limit logins on a group of machines?

2009-06-17 Thread Bill Jonas
On Wed, Jun 17, 2009 at 12:09:14PM -0700, Eric Shubert wrote: Why (might i ask) would you want to do such a thing? Perhaps there's a simpler solution to whatever the problem is you're trying to solve. In a nutshell, it's a proxy service (yes, this is for work), and users should not be able to

Re: Limit logins on a group of machines?

2009-06-17 Thread Bill Jonas
On Wed, Jun 17, 2009 at 01:43:35PM -0700, Lisa Kachold wrote: sLDAP will do this nicely. Ah, neat. I wasn't sure if it would or not; the documentation that I saw didn't really address that (although I wasn't searching for (s)LDAP specifically). Really, centralized authentication would be

Re: Limit logins on a group of machines?

2009-06-17 Thread Stephen
this is kind of where an LDAP server comes in to play, then you cna restrict number of concurrent logins across the network. On Wed, Jun 17, 2009 at 10:58 AM, Bill Jonasb...@billjonas.com wrote: Hi all, I was wondering if anybody might point me in the right direction here. I know that for

Re: Limit logins on a group of machines?

2009-06-17 Thread Joshua Zeidner
you also may be able to configure Kerberos to this. http://en.wikipedia.org/wiki/Kerberos_(protocol) -jmz On Wed, Jun 17, 2009 at 3:44 PM, Stephencryptwo...@gmail.com wrote: this is kind of where an LDAP server comes in to play, then you cna restrict number of concurrent logins across