Re: thanks! [was Re: shutdown user and accountability]

2001-12-11 Thread Carel Fellinger
On Tue, Dec 11, 2001 at 01:46:11PM +0900, Olaf Meeuwissen wrote: ... Thanks to everyone who responded. I should have been a little clearer on the system setup. The machine in question consists of a main unit and a bunch of externally attached hard disks connected to a network. It has no

Re: thanks! [was Re: shutdown user and accountability]

2001-12-11 Thread Carel Fellinger
On Tue, Dec 11, 2001 at 01:46:11PM +0900, Olaf Meeuwissen wrote: ... Thanks to everyone who responded. I should have been a little clearer on the system setup. The machine in question consists of a main unit and a bunch of externally attached hard disks connected to a network. It has no

thanks! [was Re: shutdown user and accountability]

2001-12-10 Thread Olaf Meeuwissen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Olaf Meeuwissen [EMAIL PROTECTED] wrote: I'm maintaining a (small-time) group server for our department. In order to satisfy company policy requirements I need to provide a way to shutdown the server in case of emergencies. Our network admin

thanks! [was Re: shutdown user and accountability]

2001-12-10 Thread Olaf Meeuwissen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Olaf Meeuwissen [EMAIL PROTECTED] wrote: I'm maintaining a (small-time) group server for our department. In order to satisfy company policy requirements I need to provide a way to shutdown the server in case of emergencies. Our network admin was

Re: shutdown user and accountability

2001-11-29 Thread Gerhard Schneider
On Wed, 2001-11-28 at 01:51, Olaf Meeuwissen wrote: Dear .debs, I'm maintaining a (small-time) group server for our department. In order to satisfy company policy requirements I need to provide a way to shutdown the server in case of emergencies. Our network admin was kind enough to give

Re: shutdown user and accountability

2001-11-29 Thread Niall Walsh
I can't resist it! Add a usb digital camera to the box and only allow people who are not logged in via ssh (and therefore known users) to shut the machine down by using the Ctrl+Alt+Del on a keyboard. Add a shutdown init script to the start of the process which takes a few snaps of the

Re: shutdown user and accountability

2001-11-29 Thread Carel Fellinger
On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: I can't resist it! me too:) Add a usb digital camera to the box and only allow people who are not I've thought of this too, but rejected it because it's s easy to circumvent, just place your hand in front of the camera. --

Re: shutdown user and accountability

2001-11-29 Thread Niall Walsh
Carel Fellinger wrote: On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: I can't resist it! me too:) Add a usb digital camera to the box and only allow people who are not I've thought of this too, but rejected it because it's s easy to circumvent, just place your hand in

Re: shutdown user and accountability

2001-11-29 Thread Petro
On Thu, Nov 29, 2001 at 05:59:40PM +, Niall Walsh wrote: Carel Fellinger wrote: On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: I can't resist it! me too:) Add a usb digital camera to the box and only allow people who are not I've thought of this too, but rejected it

Re: shutdown user and accountability

2001-11-29 Thread Warren Turkal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This would be a wonderful application of OTP's. On Thursday 29 November 2001 11:59 am, Niall Walsh wrote: Maybe put the password with the security guard so he can record who took the passwd to reset it (obviously you need to reset the password

Re: shutdown user and accountability

2001-11-29 Thread Gerhard Schneider
On Wed, 2001-11-28 at 01:51, Olaf Meeuwissen wrote: Dear .debs, I'm maintaining a (small-time) group server for our department. In order to satisfy company policy requirements I need to provide a way to shutdown the server in case of emergencies. Our network admin was kind enough to give

Re: shutdown user and accountability

2001-11-29 Thread Niall Walsh
I can't resist it! Add a usb digital camera to the box and only allow people who are not logged in via ssh (and therefore known users) to shut the machine down by using the Ctrl+Alt+Del on a keyboard. Add a shutdown init script to the start of the process which takes a few snaps of the

Re: shutdown user and accountability

2001-11-29 Thread Carel Fellinger
On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: I can't resist it! me too:) Add a usb digital camera to the box and only allow people who are not I've thought of this too, but rejected it because it's s easy to circumvent, just place your hand in front of the camera. --

Re: shutdown user and accountability

2001-11-29 Thread Paul Fleischer
ons, 2001-11-28 kl. 02:58 skrev Olaf Meeuwissen: That's exactly what my sudo setup does right now. The problem is that apparently *everyone* needs to be able to shut down the machine (for reasons that are beyond me). Added accounts on an as needed basis is fine with me, but I don't fancy

Re: shutdown user and accountability

2001-11-29 Thread Niall Walsh
Carel Fellinger wrote: On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: I can't resist it! me too:) Add a usb digital camera to the box and only allow people who are not I've thought of this too, but rejected it because it's s easy to circumvent, just place your hand

Re: shutdown user and accountability

2001-11-29 Thread Petro
On Thu, Nov 29, 2001 at 05:59:40PM +, Niall Walsh wrote: Carel Fellinger wrote: On Thu, Nov 29, 2001 at 10:37:24AM +, Niall Walsh wrote: I can't resist it! me too:) Add a usb digital camera to the box and only allow people who are not I've thought of this too, but rejected it

Re: shutdown user and accountability

2001-11-29 Thread Warren Turkal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This would be a wonderful application of OTP's. On Thursday 29 November 2001 11:59 am, Niall Walsh wrote: Maybe put the password with the security guard so he can record who took the passwd to reset it (obviously you need to reset the password

Re: shutdown user and accountability

2001-11-28 Thread Mathias Palm
On Tue, 27 Nov 2001, Rishi L Khan wrote: How about Cntrl-Alt-Del? That shuts down a debian box without even logging in. As far as accountablity ... you could do it the old fashioned way and have a sign in sheet ... one stupid policy deserves another. -rishi It _can_ shut

Re: shutdown user and accountability

2001-11-28 Thread Mathias Palm
On 28 Nov 2001, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: On Tue, 2001-11-27 at 18:58, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo

Re: shutdown user and accountability

2001-11-28 Thread Petro
On Wed, Nov 28, 2001 at 10:58:47AM +0900, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. That's exactly what my sudo setup does

Re: shutdown user and accountability

2001-11-28 Thread Mathias Palm
On Tue, 27 Nov 2001, Rishi L Khan wrote: How about Cntrl-Alt-Del? That shuts down a debian box without even logging in. As far as accountablity ... you could do it the old fashioned way and have a sign in sheet ... one stupid policy deserves another. -rishi It _can_ shut

Re: shutdown user and accountability

2001-11-28 Thread Mathias Palm
On 28 Nov 2001, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: On Tue, 2001-11-27 at 18:58, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo

Re: shutdown user and accountability

2001-11-28 Thread Petro
On Wed, Nov 28, 2001 at 10:58:47AM +0900, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. That's exactly what my sudo setup does

shutdown user and accountability

2001-11-27 Thread Olaf Meeuwissen
Dear .debs, I'm maintaining a (small-time) group server for our department. In order to satisfy company policy requirements I need to provide a way to shutdown the server in case of emergencies. Our network admin was kind enough to give me two alternatives: 1) provide an on-screen shutdown

Re: shutdown user and accountability

2001-11-27 Thread Blake Barnett
Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. Or you could write your own script which wraps around halt/shutdown and logs what it's doing via logger or syslog... On Tue, 2001-11-27 at 17:51, Olaf

Re: shutdown user and accountability

2001-11-27 Thread William R Ward
Do you have any source of information about the employees? HR database or something like that? You could cobble together a setuid Perl or C program that asks them information only they would know to authenticate them, verifies it, logs it, and then does a shutdown. Set up a guest account with

Re: shutdown user and accountability

2001-11-27 Thread Olaf Meeuwissen
Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. That's exactly what my sudo setup does right now. The problem is that apparently *everyone* needs to be able to

Re: shutdown user and accountability

2001-11-27 Thread Olaf Meeuwissen
Blake Barnett [EMAIL PROTECTED] writes: On Tue, 2001-11-27 at 18:58, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. That's

shutdown user and accountability

2001-11-27 Thread Olaf Meeuwissen
Dear .debs, I'm maintaining a (small-time) group server for our department. In order to satisfy company policy requirements I need to provide a way to shutdown the server in case of emergencies. Our network admin was kind enough to give me two alternatives: 1) provide an on-screen shutdown

Re: shutdown user and accountability

2001-11-27 Thread Blake Barnett
Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. Or you could write your own script which wraps around halt/shutdown and logs what it's doing via logger or syslog... On Tue, 2001-11-27 at 17:51, Olaf

Re: shutdown user and accountability

2001-11-27 Thread Olaf Meeuwissen
Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. That's exactly what my sudo setup does right now. The problem is that apparently *everyone* needs to be able to

Re: shutdown user and accountability

2001-11-27 Thread Blake Barnett
On Tue, 2001-11-27 at 18:58, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. That's exactly what my sudo setup does right now. The

Re: shutdown user and accountability

2001-11-27 Thread Olaf Meeuwissen
Blake Barnett [EMAIL PROTECTED] writes: On Tue, 2001-11-27 at 18:58, Olaf Meeuwissen wrote: Blake Barnett [EMAIL PROTECTED] writes: Can't you give a group sudo access? If so, just add everyone to a group and give that group sudo /sbin/halt or sudo /sbin/shutdown or both. That's

Re: shutdown user and accountability

2001-11-27 Thread Rishi L Khan
How about Cntrl-Alt-Del? That shuts down a debian box without even logging in. As far as accountablity ... you could do it the old fashioned way and have a sign in sheet ... one stupid policy deserves another. -rishi On 28 Nov 2001, Olaf Meeuwissen wrote: Blake Barnett [EMAIL

Re: shutdown user and accountability

2001-11-27 Thread Mike Renfro
On Wed, Nov 28, 2001 at 09:51:19AM +0900, Olaf Meeuwissen wrote: I'm maintaining a (small-time) group server for our department. In order to satisfy company policy requirements I need to provide a way to shutdown the server in case of emergencies. Our network admin was kind enough to give

Re: shutdown user and accountability

2001-11-27 Thread William R Ward
Do you have any source of information about the employees? HR database or something like that? You could cobble together a setuid Perl or C program that asks them information only they would know to authenticate them, verifies it, logs it, and then does a shutdown. Set up a guest account with