script for checking logins by certain users

[Maurice Peterse]

hello,

i need a script that tells me (by email)
what certain users (in 1 group) did (commands)
after each logout (of that user). It concerns all users
in 1 group on the system.

thanx!

[Vincenzo Restuccia]

Try http://forums.itrc.hp.com/cm/QuestionAnswer/1,1150,0x431472106351d5118fef0090279cd0f9,00.html

[Maurice Peterse]

i don't want to restrict any users, just a check on all commands used by all users in that 1 group...

and i'm no scripting-fan :/

[Shannon Petry]

The commands are not really trackable by normal means. Solution may be to setup a shell history on each user, large enough to fit their command sets, and email those to yourself.....
the problem even with doing that is that you may not be able to get a $HOME/.logout command to work on HP-UX.

All in all, I'd say it's a pretty good task. It could be done....but.....not very easily.

Regards,
Shannon

[Maurice Peterse]

then we have a challenge here.

Can't i use a script that starts archiving the commands from the moment those users login to the moment where they logout?

Any help is appreciated!!

[Ralph Grothe]

Just as an addition to Shannon's reply.

If you place a .sh_logout script in the user's home dir and trap the exit of the shell in the user's .profile

e.g.:

trap 'test -x ${HOME}/.sh_logout && . ${HOME}/.sh_logout; exit' 0

you should be able to put any commands in the .sh_logout script (such as mailing you the user's .sh_history file), which will be executed on the user's logout.

[Shannon Petry]

There is no cheap/easy way of doing what you want. The standard UNIX accounting will be able to tell you when users log in, and what commands (accum total) that they have run, but not with any intelligence or order other than how much CPU/Memory and disk the command used for the duration of the accounting session.

As a consultant, I could make something, and make it work. I have custom accounting software at many locations. However you are talking an easy 2-3 days development, and testing for what you are looking for. This would be to try and avoid smart users, but would still have problems if a user was really smart.

Regards,
Shannon

[Sundar_7]

Hi

U may check out the man pages of

scripts command in HP-UX..

It saves all the commands issued by the user

and also its out put to a file.

Might be of interest to U..

Check it out

SUndar

[Mark Vollmers]

Maurice-

What exactly are you watching for for this particular group? Is this just to keep an eye on them in general or to see if they are using commands that they arn't supposed to be using? If it is the later, it might be easier to make a shell for the group that only allows them to use a few choice commands (I remember seeing a thread or two on this a while ago).

Mark