How to logout users if they are in the system inactive

[Syed Feroz]

Hi
How to logout the user if they didn't used the system more than 15 minutes under tru64 Unix
Thanks in advance

[Ralf Puchner]

have a look into the admin guide or if you are using an old tru64 version there is a not within the release notes about autologout feature.

[Syed Feroz]

Hi Ralf

We are runing Tru64 V5.1B

thanks

[Syed Feroz]

Let me put the question this way

Hello
Our Security department asking us (system Administrator Group) if a user login and his process is idle for more than 30 minutes
Systems has to recognize and kill that process
How can we do this?

[Muthukumar_5]

We can do this by idenitfying the user status with who -Ru command.

There is a script, I have tried for Linux over there for killing users whose idle is more than 30 minutes as,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=684656

Change that script for 15 to do your requirement easily.

Regards
Muthu

[Eric van Dijken]

Set TMOUT in seconds, from your /etc/profile

TMOUT=240
export TMOUT

Inactive user will be logged out after 3 min.

[Ralf Puchner]

as written before this is well documented within the manuals.

[Syed Feroz]

Hi
Thank you to every one for helping me

[Ross Minkov]

> Set TMOUT in seconds, from your /etc/profile

> TMOUT=240
> export TMOUT

This will only work for shells that use /etc/profile -- like bash, ksh, sh

If you use csh, tcsh then edit /etc/csh.cshrc to add:

set autologout = 15


HTH,
Ross

[Hein van den Heuvel]

Idle process killer are, IMHO, counter productive causing increased resource usage and a false sense of security.

Let's hope the environment variable is good enough for you super-administrators.
Of course any knowledgabel user can circumvent those right? (or is this implemented more cleverly then I think and can not be over-ruled?)

You may consider an additional hourly cron job to check for idle terminals

Something along the lines of....

w -h | cut -b 10-20,43-51 | awk 'BEGIN {q="\"";x=q}/day/{x=x $1 " "}/[0-9]:/{x=x $1 " "}END{x=x q; system ("ps -t " x)}'

Then 'kill' those pid's (with +) ?!?

fwiw,
Hein.