Re: session management

["Pierangelo Masarati" <ando@sys-net.it>]

> Hi,
>   I need some information on session management
> capabilities in openldap. I have set-up openldap
> server and clients. Now, what do I do if I need to
> check the session stats like total time user was
> logged on to system, session timeout ( if a user is
> idle for some amount of time the session should get
> closed automatically etc.)
>
>  Or, shall I use any of the pam modules to achive
> this? PAM session management modules only log the
> login and logoff events. What about time outs?? could
> I define it somewhere and have a proper ldap solution?

I guess you're talking about unix sessions
of users auth'ed via pam_ldap.  Refer to
www.padl.com for pam_ldap specific questions.

Otherwise, if you refer to storing info about
sessions in OpenLDAP's slapd, I guess it can
store almost whatever you need, but you'll
probably need to write a client, or hack
pam_ldap, to do that for you, unless it already
does.  So, check www.padl.com again.

p.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it