Re: using fam to monitor login/logoff

[Michael Wardle <michael.wardle@xxxxxxxxxx>]

On Thu, 2003-03-27 at 18:24, Anteneh Tesfaye wrote:
> I am not very familiar with Linux.  For this project I was working on, I
> wanted to monitor when people login and logoff from a Linux machine (not
> remotely).

I would suggest looking into the authentication system used on most
GNU/Linux distributions: PAM.  It may be possible to have PAM perform a
custom command when a user logs in or out.

I don't think monitoring /dev/console is a very good idea.  You would be
better monitoring /var/log/auth, /var/log/secure, or /dev/log/wtmp.

Another method you could use is the watch feature in tcsh.

Hope this helps

-- 
Michael Wardle <michael.wardle@xxxxxxxxxx>
Adacel Technologies