User Name wrote:
We user the User Name field and a custom built PAM module to only
allow access to the designated User with their card.
AMGH could be used for this instead of a custom PAM module,
by removing the "clearuser" option from /etc/pam.conf.
But this enforces the use, rather than simply tracking it as was
originally requested.
-Bob
From: "P.S.M. Swamiji" <[EMAIL PROTECTED]>
Reply-To: SunRay-Users mailing list <[email protected]>
To: SunRay-Users mailing list <[email protected]>
Subject: Re: [SunRay-Users] Log for smart card with unix user id
Date: Wed, 21 Jun 2006 12:13:44 +0530
fitra budi anggoro wrote:
Hi guys,
Sorry for interrupting a very long discussion about why sun ray.
Need your help here :)
I am having 90 users with registered smart card only policy. Every
smart card is registered with user name. The problem that these
users are exchanging their cards. I want to track all of this.
Anyone know where to find this smartcard user's log (if any) or
perhaps create small script (please, a very simple one since I am
new about shell scripting) to dump to a file.
I really want to see this smart card is login with which unix id, at
what time. From this, I can see if one smart card is used for
several unix id.
Using utsession -p, one can get currently what unixid used by the
corresponding registered card on that particular server. If the setup
is a HA this needs to be run on all the servers
in the HA group. Perhaps using Admin GUI--> Sessions link we can get
sessions on all
the servers in HA group by selecting the server.
I don't think there is a way to get who used the card previously.
However we can get some info from old messages log which helps in
finding
any other user used the card in last 5 days.
Thanks
P.S.M.Swamiji
I am using SRSS 3.1, solaris 10, failover group, registered smart
card only, no AMGH, NFS for home directory, and LDAP for authenticate.
Hope anyone can help me on this one.
Thanks,
Fitra
------------------------------------------------------------------------
Yahoo! Messenger with Voice. Make PC-to-Phone Calls
<http://us.rd.yahoo.com/mail_us/taglines/postman1/*http://us.rd.yahoo.com/evt=39663/*http://voice.yahoo.com>
to the US (and 30+ countries) for 2ยข/min or less.
------------------------------------------------------------------------
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's
FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
