topic Re: script for checking logins by certain users in Operating System - HP-UX

script for checking logins by certain users

Maurice Peterse — Mon, 18 Jun 2001 10:20:48 GMT

hello,

i need a script that tells me (by email)
what certain users (in 1 group) did (commands)
after each logout (of that user). It concerns all users
in 1 group on the system.

thanx!

Re: script for checking logins by certain users

Vincenzo Restuccia — Mon, 18 Jun 2001 11:21:18 GMT

Try http://forums.itrc.hp.com/cm/QuestionAnswer/1,1150,0x431472106351d5118fef0090279cd0f9,00.html

Re: script for checking logins by certain users

Maurice Peterse — Mon, 18 Jun 2001 11:40:44 GMT

i don't want to restrict any users, just a check on all commands used by all users in that 1 group...

and i'm no scripting-fan :/

Re: script for checking logins by certain users

Shannon Petry — Mon, 18 Jun 2001 13:06:13 GMT

The commands are not really trackable by normal means. Solution may be to setup a shell history on each user, large enough to fit their command sets, and email those to yourself.....
the problem even with doing that is that you may not be able to get a $HOME/.logout command to work on HP-UX.

All in all, I'd say it's a pretty good task. It could be done....but.....not very easily.

Regards,
Shannon

Re: script for checking logins by certain users

Maurice Peterse — Wed, 20 Jun 2001 08:46:40 GMT

then we have a challenge here.

Can't i use a script that starts archiving the commands from the moment those users login to the moment where they logout?

Any help is appreciated!!

Re: script for checking logins by certain users

Ralph Grothe — Wed, 20 Jun 2001 09:28:21 GMT

Just as an addition to Shannon's reply.

If you place a .sh_logout script in the user's home dir and trap the exit of the shell in the user's .profile

e.g.:

trap 'test -x ${HOME}/.sh_logout && . ${HOME}/.sh_logout; exit' 0

you should be able to put any commands in the .sh_logout script (such as mailing you the user's .sh_history file), which will be executed on the user's logout.

Re: script for checking logins by certain users

Shannon Petry — Tue, 26 Jun 2001 12:00:21 GMT

There is no cheap/easy way of doing what you want. The standard UNIX accounting will be able to tell you when users log in, and what commands (accum total) that they have run, but not with any intelligence or order other than how much CPU/Memory and disk the command used for the duration of the accounting session.

As a consultant, I could make something, and make it work. I have custom accounting software at many locations. However you are talking an easy 2-3 days development, and testing for what you are looking for. This would be to try and avoid smart users, but would still have problems if a user was really smart.

Regards,
Shannon

Re: script for checking logins by certain users

Sundar_7 — Wed, 11 Jul 2001 12:14:39 GMT

Hi

U may check out the man pages of

scripts command in HP-UX..

It saves all the commands issued by the user

and also its out put to a file.

Might be of interest to U..

Check it out

SUndar

Re: script for checking logins by certain users

Mark Vollmers — Wed, 11 Jul 2001 13:32:13 GMT

Maurice-

What exactly are you watching for for this particular group? Is this just to keep an eye on them in general or to see if they are using commands that they arn't supposed to be using? If it is the later, it might be easier to make a shell for the group that only allows them to use a few choice commands (I remember seeing a thread or two on this a while ago).

Mark