topic Re: Script Help in Operating System - HP-UX

Script Help

Nick D'Angelo — Tue, 15 Oct 2002 16:16:49 GMT

I am looking for a script that keep track of the number of users that are currently logged on and will restrict logins to a maximum of 32.

Ie, our application can only have 32 users but we are lacking the tool to restrict this within the application at this time.

Once the 32 user count is hit, then send an email message to the user and also record the login attempt in a log file under /tmp.

Lastly, there will be a two users that should be exempt from this, ie the two sys admins.

Can anyone help me with this?

Thank you,

Re: Script Help

Jordan Bean — Tue, 15 Oct 2002 16:28:28 GMT

Easiest solution:
Add this to /etc/profile:

if [ $(id -u) -ne 0 -a $(users | sed 's/root//g' | wc -c) -gt 32 ]; then exit 1; fi

I'm sure of the equivalent for CSH in /etc/csh.login, so I'll let others work that out.

Another solution is to reconfigure the kernel by reducing npty.

You should also concider restricting how many times each user may be logged in by defining NUMBER_OF_LOGINS_ALLOWED=5 in /etc/default/security.

Re: Script Help

Jordan Bean — Tue, 15 Oct 2002 16:30:51 GMT

Typo. I'm NOT sure of the CSH variant.

Re: Script Help

Nick D'Angelo — Tue, 15 Oct 2002 16:49:57 GMT

Thanks for the script, however, it limits all logins and it does not check to see if the minimum has been met yet.

Re: Script Help

Jordan Bean — Tue, 15 Oct 2002 16:59:10 GMT

Sorry... I'm working on that part... Having a little trouble with regular expressions in sed...

Re: Script Help

Jordan Bean — Tue, 15 Oct 2002 17:40:25 GMT

Okay, sorry about the wait. Try the attached snippet for /etc/profile.

Make sure your admins are part of the group adm (or any other that you specify) so that they are excluded from the user count. Also, root bypasses this check and is excluded from the count as well.

Re: Script Help

Leif Halvarsson_2 — Tue, 15 Oct 2002 17:48:16 GMT

Hi
A question.
Does the users actually log in on this host and start the application with a command or is it some kind of client-server application. In the later case is the user not realy logged in to the host and tracking users logged in will perhaps not work.

Another idea could be to check how many instances of the application is running before starting a new
if ['ps -ef |grep |wc -l' -gt 32 ]
then
"do something (logout for example)"
else
app_start
fi

Re: Script Help

Nick D'Angelo — Mon, 21 Oct 2002 11:16:31 GMT

Jordan, works very well - thanks again.

Cheers,

Nickd