From owner-freebsd-isp  Fri Jul  7  9:37:12 2000
Delivered-To: freebsd-isp@freebsd.org
Received: from firewall.ceco.com (firewall.ceco.com [198.29.253.130])
	by hub.freebsd.org (Postfix) with SMTP id C326537BF3D
	for <freebsd-isp@freebsd.org>; Fri,  7 Jul 2000 09:37:06 -0700 (PDT)
	(envelope-from brueggma@ceco.ceco.com)
Received: by firewall.ceco.com; id LAA06010; Fri, 7 Jul 2000 11:37:01 -0500
Received: from ceco.ceco.com(130.197.8.140) by firewall.ceco.com via smap (V4.2)
	id xma005194; Fri, 7 Jul 00 11:36:31 -0500
Received: from chaos.ceco.com (chaos.ceco.com [130.197.113.102])
	by ceco.ceco.com (8.8.8+Sun/8.8.8) with ESMTP id LAA01252;
	Fri, 7 Jul 2000 11:39:22 -0500 (CDT)
Received: (from brueggma@localhost)
	by chaos.ceco.com (8.8.8+Sun/8.8.8) id LAA00456;
	Fri, 7 Jul 2000 11:36:29 -0500 (CDT)
Date: Fri, 7 Jul 2000 11:36:29 -0500
From: Eric Brueggmann <brueggma@ceco.ceco.com>
To: dnelson@emsphone.com
Cc: freebsd-isp@freebsd.org
Subject: Re: accounting - FBSD 4.0-STABLE
Message-ID: <20000707113629.A444@chaos.ceco.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.2i
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


> What doesn't work?  Is /var/account/acct not being touched?  Does
> lastcomm not show the commands?  That's all process accounting does.
>
> If you want to limit how long people can stay logged in, try
> ports/sysutils/idled.
>
> -- 
>        Dan Nelson
>        dnelson@emsphone.com

Hello,

	I apologize, I'm a little confused on what accounting is.  As far
as I can tell, it just accounts for all the CPU time on a per process basis.
I thought accounting was responsible for "sessionlimit" (ie: # of logins
per user) too.  Thank you for clarifying that for me.  I'm still stuck on
my original problem though:  anyone in the class "shell" is able to
login more than once, is there something that I'm missing below?

					Thanks for your help,
					Eric B.


1.)  Add a user called "test" and put him in a class called "shell"

        adduser test

        test:don'tworryaboutit:1500:1500:shell:0:0:TEST Person:
        (all one line)                  /home/test:/usr/local/bin/rbash

2.)  Edit /etc/login.conf

shell|Shell Account Class:\
        :copyright=/etc/COPYRIGHT:\
        :accounted:\
        :welcome=/etc/motd:\
        :setenv=MAIL=~/.INBOX,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\
        :path=/bin /usr/bin /usr/games /usr/local/bin /usr/X11R6/bin ~/bin:\
        :nologin=/etc/nologin:\
        :cputime=unlimited:\
        :datasize=5m:\
        :stacksize=5m:\
        :memorylocked=5m:\
        :memoryuse=5m:\
        :filesize=50m:\
        :coredumpsize=1m:\
        :openfiles=10:\
        :maxproc=14:\
        :sbsize=unlimited:\
        :sessionlimit=1:\
        :umask=022:\
        :requirehome:\
        :refreshtime=2m:\
        :idletime=10m:\
        :shell=/usr/local/bin/rbash:\
        :warnexpire=7d:\
        :expireperiod=180d:\
        :graceexpire=7d:\
        :autodelete=30d:\
        :gracetime=10m:\
        :warntime=1m:\
        :priority=5:

3.)  Update the database

        cap_mkdb /etc/login.conf

4.)  Reboot.  And away we go..


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message