Alert for user login

elainelaw · 11-25-2009, 08:40 PM

Can advise if I want to have a alert message when a specific user is login to the system , what can I do ? that mean if a specific is login to system then send me a alert message ( by any way ) to inform me the user is login , what is the method ? thanks

btmiller · 11-25-2009, 09:19 PM

Set up a program such as logwatch to monitor your system logs and send you an e-mail when a particular user logs in. This is probably the easiest way. There are a number of log monitoring programs available -- Google should help you out here.

TB0ne · 11-25-2009, 09:22 PM

Quote:

Originally Posted by elainelaw

Can advise if I want to have a alert message when a specific user is login to the system , what can I do ? that mean if a specific is login to system then send me a alert message ( by any way ) to inform me the user is login , what is the method ? thanks

Lots of ways.

- Put something in the users .bashrc, to send you a message.
- Put something in the system default profile, to check the user ID, and send you a message
- Use Logwatch or another logfile monitoring program, and look at the system logs, to see when that ID comes up
- Put something in cron to run a 'last' command periodically, and look for the ID, then send you a message

elainelaw · 11-29-2009, 09:02 PM

Quote:

Originally Posted by TB0ne

Lots of ways.

- Put something in the users .bashrc, to send you a message.
- Put something in the system default profile, to check the user ID, and send you a message
- Use Logwatch or another logfile monitoring program, and look at the system logs, to see when that ID comes up
- Put something in cron to run a 'last' command periodically, and look for the ID, then send you a message

is this the easiest way ?

- Put something in the users .bashrc, to send you a message.

if use the way , what I need to add to ? thx

evo2 · 11-29-2009, 09:25 PM

Quote:

Originally Posted by elainelaw

is this the easiest way ?

- Put something in the users .bashrc, to send you a message.

if use the way , what I need to add to ? thx

I think putting it in the system profile and checking the UID is better since it is generally considered rude to modify users files. Also, unless you remove the users write permission they can simply remove your code.
Actually both of these approaches are a bit messy, I would recommend the logwatch approach.

Evo2.

TB0ne · 11-30-2009, 09:39 AM

Quote:

Originally Posted by evo2

I think putting it in the system profile and checking the UID is better since it is generally considered rude to modify users files. Also, unless you remove the users write permission they can simply remove your code.
Actually both of these approaches are a bit messy, I would recommend the logwatch approach.

Evo2.

Yes, a bit messy, but effective, and easy to implement. Logwatch is a cleaner approach, but in my opinion, overkill....you'd have to set up logwatch, tell it what to look for, then write the script to take whatever action you want. The UID scan in the default profile is probably 4 lines of script....

And elainelaw, you asked

Quote:

is this the easiest way ?
- Put something in the users .bashrc, to send you a message.
if use the way , what I need to add to ? thx

They're all fairly easy...and you need to write your own shell scripts. We can't tell you what to add, since we don't know exactly what you need. You'll have to actually do this yourself. And please spell out your words...

elainelaw · 11-30-2009, 08:25 PM

Quote:

Originally Posted by TB0ne

Yes, a bit messy, but effective, and easy to implement. Logwatch is a cleaner approach, but in my opinion, overkill....you'd have to set up logwatch, tell it what to look for, then write the script to take whatever action you want. The UID scan in the default profile is probably 4 lines of script....

And elainelaw, you asked

They're all fairly easy...and you need to write your own shell scripts. We can't tell you what to add, since we don't know exactly what you need. You'll have to actually do this yourself. And please spell out your words...

if I perfer to write a script , can give me a hints , how can I check whether the user is logging ? thx

TB0ne · 11-30-2009, 08:30 PM

Quote:

Originally Posted by elainelaw

if I perfer to write a script , can give me a hints , how can I check whether the user is logging ? thx

Again SPELL OUT YOUR WORDS..it's "thanks", not "thx"...

And I gave you hints in my first post, as did others on this thread. You can use the last command, put a command onto the user(s) bashrc, or check the user ID in the system profile, and do whatever you want from there.