[OpenAFS] Multiple logins

Coy Hile coy.hile@coyhile.com
Sun, 20 Mar 2011 08:19:53 -0400

On Sat, Mar 19, 2011 at 1:23 PM, Jaap Winius <jwinius@umrk.nl> wrote:
> Quoting Dirk Heinrichs <dirk.heinrichs@altum.de>:
>>> ... Is it possible to prevent users from logging in more than once ...
>> No, you can't. ...

Couldn't you potentially write a PAM module to do exactly that?  At
the top of the session stack, have it store the status of the user's
session in LDAP somewhere (or potentially in some other database, and
then on logout, remove the "Joe has an active session" flag.  Then,
upon a second or subsequent attempt at login, the PAM module could
kick the user out?  I don't know the logistics of doing so,
unfortunately; potentially Russ could give a better hand-wave