Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 31 Oct 2011 11:25:32 -0700
From:      Jason Helfman <jhelfman@e-e.com>
To:        Dan Nelson <dnelson@allantgroup.com>
Cc:        Damien Fleuriot <ml@my.gd>, FreeBSD Questions <freebsd-questions@freebsd.org>, Modulok <modulok@gmail.com>
Subject:   Re: idletime in login.conf
Message-ID:  <20111031182532.GF82316@eggman.experts-exchange.com>
In-Reply-To: <20111031150934.GO93709@dan.emsphone.com>
References:  <CAN2%2BEpawKTw4yJwnN87VEk4KRxmJTOughDLAQYRjsCecy=D-oA@mail.gmail.com> <E03916D7-DF2E-4DA6-B3C0-1B5E3179A6C8@my.gd> <20111031150934.GO93709@dan.emsphone.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Oct 31, 2011 at 10:09:34AM -0500, Dan Nelson thus spake:
>In the last episode (Oct 31), Damien Fleuriot said:
>> On 30 Oct 2011, at 16:45, Modulok <modulok@gmail.com> wrote:
>> > List,
>> >
>> > Goal: Automatically logoff users that are idle after 'x' minutes.
>> >
>> > Attempt: I added this to /etc/login.conf to the default login class:
>> >
>> >    :idletime=10m:
>> >
>> > I then rebuilt the database:
>> >
>> >    cap_mkdb /etc/login.conf
>> >
>> > Problem: It doesn't work. The 'w' command shows users idle for 20
>> > minutes or more.  I'm missing something.  Other than an autologout shell
>> > variables, how do I force idle users to logout?
>>
>> Are these users that logged in after or before your change ?
>>
>> Obviously the idle timeout only applies to users who logged in after you
>> adjusted the value and rebuilt the db.
>
>Actually, the idle timeout is not implemented in the base system.  It's
>there in case someone writes a 3rd-party module that does idle detection.
>See the login.conf manpage:
>
>RESERVED CAPABILITIES
>     The following capabilities are reserved for the purposes indicated and
>     may be supported by third-party software.  They are not implemented in
>     the base system.
>[...]
>     idletime          time                Maximum idle time before logout.
>
>
You may want to look into /usr/ports/sysutils/doinkd for this. I use it on
many systems, and it works remarkable well, and it is highly configurable.

-jgh

-- 
Jason Helfman
System Administrator
experts-exchange.com
http://www.experts-exchange.com/M_4830110.html
E4AD 7CF1 1396 27F6 79DD  4342 5E92 AD66 8C8C FBA5



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20111031182532.GF82316>