[OpenAFS] Multiple logins

[Coy Hile]

On Sat, Mar 19, 2011 at 1:23 PM, Jaap Winius <jwinius@umrk.nl> wrote:
> Quoting Dirk Heinrichs <dirk.heinrichs@altum.de>:
>
>>> ... Is it possible to prevent users from logging in more than once ...
>>
>> No, you can't. ...

Couldn't you potentially write a PAM module to do exactly that?  At
the top of the session stack, have it store the status of the user's
session in LDAP somewhere (or potentially in some other database, and
then on logout, remove the "Joe has an active session" flag.  Then,
upon a second or subsequent attempt at login, the PAM module could
kick the user out?  I don't know the logistics of doing so,
unfortunately; potentially Russ could give a better hand-wave
solution?

-Coy