two user questions

[Douglass Anderson]

1) can HPUX 11.11 V1 be set up to limit only one occurence of a username at a time ? (i.e. Username johnd can only log in once.)

2) Is there an easy way to log who is logging into your HP-UX 11.11 server to charge a site for usage? (i.e. five people logged in therefore X dollars.)

[Ivan Krastev · Accepted solution]

1. You can limit number of connected users in 2 ways: via /etc/default/security or script in .profile for users.
For more see this thread - http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1064038


2. All user logins are saved in wtmp files. Use commands last and lastb (for bad logins) to get info.
For more see "man last".

regards,
ivan

[A. Clay Stephenson]

For 2) the standard UNIX accounting system is tailor-made for this. It will keep up with the total per-user login time for all users Man 1m acct to get started and man acctcom for ideas about reports.

[Rasheed Tamton]

For 1) the thread provided by Ivan is a good one.

For 2) see below for more details:
The HP-UX specific auditing subsystem solves one important limitation
of traditional logging: the inability to resolve ambiguities between
accounts having matching User/Group ID numbers. As conversion to a
trusted system assigns unique Audit ID numbers to every account, the
auditing subsystem can always report the precise user responsible for
any event.

While the details are beyond the scope of this paper, SAM allows the
configuring of the following categories of system activity:

Users:

Individual users may be audited

Events:

The following types of events may be logged:

object creation, deletion, access permission modification
object opening and closing
process operations
removable media mounting/unmounting
user logins and logouts
administrative and privileged operations
interprocess communication
user-defined events

User-login logging is handled differently from other event classes:
selected event classes are only logged for users who have themselves
been selected for auditing, however when the user-login event class is
selected, all user logins are logged regardless of whether the
individual user is selected or not.

System Calls:

the individual system calls associated with the event list may be
audited, as well as many significant programmatic calls, for example
setuid and setgid.

In general, you may log successful and/or unsuccessful attempts to
access any of the above events.

[Douglass Anderson]

thx