[prev in list] [next in list] [prev in thread] [next in thread] 

List:       hpux-admin
Subject:    [HPADM] Additional Summary: security questions..
From:       Giri Sekar <sekar () att ! com>
Date:       2000-11-30 13:37:31
[Download RAW message or body]

Hai Team:

As i summarized  yesterday i forgot to mention by oversight a solution
given by Randy Styka for my 4th question.

4. Terminate inactive sessions after 60 minutes.

 Bill Hassell rightly indicates
issues with properly defining an idle user.  But the solution
below addresses these concerns.  It is not shell based (like
TMOUT) and it has options for how you want various situations
to be handled, including background processes, rlogin, rsh, etc.
according to randy...

So the standard tools won't work but there is a solution....

The environment variable TMOUT will log off idle users, but only
if they are at a shell prompt.  Scripts like "idled" will log off
idle users but they look at keyboard activity and can log off a
user running a cpu bound job with no keyboard activity.

There is a third party package called LOGMON that
monitors the cpu usage of each user and their child processes, and
can then log off idle users.  You can vary the inactivity time
by user, time of day, etc.  You can control how users are logged off.
randy said the details are available at
www.computron.com/ne

Thanks
Giri.


[Attachment #3 (text/html)]

<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
Hai Team:
<p>As i summarized&nbsp; yesterday i forgot to mention by oversight a solution
given by Randy Styka for my 4th question.
<p><b>4. Terminate inactive sessions after 60 minutes.</b>
<p>&nbsp;Bill Hassell rightly indicates
<br>issues with properly defining an idle user.&nbsp; But the solution
<br>below addresses these concerns.&nbsp; It is not shell based (like
<br>TMOUT) and it has options for how you want various situations
<br>to be handled, including background processes, rlogin, rsh, etc. according
to randy...
<p>So the standard tools won't work but there is a solution....
<p>The environment variable TMOUT will log off idle users, but only
<br>if they are at a shell prompt.&nbsp; Scripts like "idled" will log
off
<br>idle users but they look at keyboard activity and can log off a
<br>user running a cpu bound job with no keyboard activity.
<p>There is a third party package called LOGMON that
<br>monitors the cpu usage of each user and their child processes, and
<br>can then log off idle users.&nbsp; You can vary the inactivity time
<br>by user, time of day, etc.&nbsp; You can control how users are logged
off.
<br>randy said the details are available at
<br>www.computron.com/ne
<p>Thanks
<br>Giri.
<br>&nbsp;</html>

--
             ---> Please post QUESTIONS and SUMMARIES only!! <---
        To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
       Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl

 Archives:  ftp.dutchworks.nl/pub/digests/hpux-admin       (FTP, browse only)
            http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic