Re: Monitoring User Logins on a Network



rightsideup wrote:
I look after a small network of 14 XP workstations and a Linux server
in a community learning centre. The server is really only used for
DHCP, printing and squid.
At the moment each person who uses a computer manually records the time
they start and stop using the machine and at the end of each month I
laboriously go through all the paperwork and compile a report detailing
total number of hours usage, number of hours per individual user and
number of logins per user. We need all this information for funders to
show that the service is well used, we perhaps have about 180
individuals using the computers at any one time.
Anyway, I've spent a lot of time trying to find a way to automate the
recording of logins, Samba and some login/logoff scripts look like the
best bet at the moment (from
http://www.faqs.org/docs/Linux-HOWTO/Samba-Authenticated-Gateway-HOWTO.html).
The problem is that it's impractical to set up a user account for
everyone on the server as well as the XP machine they use as people
come and go the whole time. I don't really need to actually use Samba
for individual filesharing so I was thinking I could just have one
public drive Z which would mount whenever someone/anyone logs in - can
I make Samba record the username that is supplied by XP and still share
the drive even if that user account doesn't exist on the Linux server?
If this is possible, any ideas for a script I could run that would
extract and collate the login data on a monthly basis?
Thanks


Take a look at one of the many NT event log to syslog forwarders (e.g. http://ntsyslog.sourceforge.net/).

It will allow you to forward all the workstations events, including logons/logoffs to you linux server. You will need to configure your syslog server to listen on a network port - the default for many install is listen locally only.

Syslog file, being text, can be readily processed by scripts - perl would be my choice.

B.
.



Relevant Pages

  • Re: Login Failures
    ... What is the user account "msmith"? ... please check the SBS Server and the client computer from ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Testing email
    ... Internet Connection wizard -> Connect to the internet) to configure mail ... Click Start, click Server Management. ... pop3 server information, user account, mailbox type and so on. ... the issue and send the log files to me: ...
    (microsoft.public.exchange.admin)
  • Re: Access Shared Printer??
    ... shares) on other domain member computers (centralized user account ... defined as a local printer that is shared is called the server. ... at the client computer with the username and password that is common to ... This command will use the ServerUserName to do an "authentication" on the ...
    (microsoft.public.win2000.printing)
  • Re: Testing email
    ... Internet Connection wizard -> Connect to the internet) to configure mail ... Click Start, click Server Management. ... pop3 server information, user account, mailbox type and so on. ... the issue and send the log files to me: ...
    (microsoft.public.exchange.admin)
  • Re: Integrated Windows Authentication authenticating the wrong user
    ... How exactly are you seeing the wrong user account? ... Windows as the troubled user to create a fresh new Windows profile and see ... If this hasn't been done already, I would check the web server logs, run a ... > The application in question is Serena's TeamTrack. ...
    (microsoft.public.inetserver.iis.security)