account should be expired if not logged in for 15 days through FTP

linux_beginer · 03-23-2011, 09:42 AM

!!!Hello Everybody!!!

We have one ftp server. Number of users are using it remotly.
My requirement is that suppose any user is not connecting to the server using FTP for 15 days then account should get expired/locked automatically. Is it possible?

savona · 03-23-2011, 10:56 AM

What ftp server are you using? The problem I see with this is you need some way to check if a user had been logged in, in the last 15 days.

I need to know what ftp server you are using to see if it logs when users log in. If it does you can write a script that will run every day to check the logs. If the user did not log in within you time limit then you can lock his account.

Questions:
1) What distro are you using? (red hat?)
2) What ftp server are you using? (vsftpd?)
3) Does your ftp server log when someone logs in?

linux_beginer · 03-23-2011, 11:13 AM

Quote:

Originally Posted by savona

What ftp server are you using? The problem I see with this is you need some way to check if a user had been logged in, in the last 15 days.

I need to know what ftp server you are using to see if it logs when users log in. If it does you can write a script that will run every day to check the logs. If the user did not log in within you time limit then you can lock his account.

Questions:
1) What distro are you using? (red hat?)
2) What ftp server are you using? (vsftpd?)
3) Does your ftp server log when someone logs in?

Distro: RHEL 5.5
Server: vsftpd
FTP server generates logs (vsftpd.conf) when anybody login.
Thanx

savona · 03-23-2011, 11:36 AM

well I am by no means a great programmer/script writer. I am sure if you post this in the programming section it will get more responses by people who can create a efficient script.

The steps I would take (which would probably be ugly and clunky)

1) Roll the vsftpd logs every night at midnight using cron with a small script.

#!/bin/bash
# Move to log directory
cd /log/dir/
# Copy log to new dated file
cp vsftpd.log vsftp.log.`date +%m%d%Y`
#Empty log
cat /dev/null vsftpd.log

2) Create a clunky script to check the logs for the last 15 days for the username.

#!/bin/bash
#Look for username in last 15 log files
for i in `find /log/dir/ -mtime -15 vsftpd.log.*`
do
X=`grep <user> $i | wc -l`
if [ -z "$X" ]
echo "user has logged in $X times in last 15 days"
else
echo "user has not logged in for 15 days"
usermod -L <user>
fi
done

To all the people on this forum: Please feel free to poke fun at me, as long as you teach me something!

To original poster: This code has not been tested and may or may not work. Please be careful.

cincindie · 03-23-2011, 11:40 AM

I believe webmin (http://webmin.com) can do it. Server settings can be configured using a web browser.

linux_beginer · 03-24-2011, 12:36 AM

Quote:

Originally Posted by savona

well I am by no means a great programmer/script writer. I am sure if you post this in the programming section it will get more responses by people who can create a efficient script.

The steps I would take (which would probably be ugly and clunky)

1) Roll the vsftpd logs every night at midnight using cron with a small script.

#!/bin/bash
# Move to log directory
cd /log/dir/
# Copy log to new dated file
cp vsftpd.log vsftp.log.`date +%m%d%Y`
#Empty log
cat /dev/null vsftpd.log

2) Create a clunky script to check the logs for the last 15 days for the username.

#!/bin/bash
#Look for username in last 15 log files
for i in `find /log/dir/ -mtime -15 vsftpd.log.*`
do
X=`grep <user> $i | wc -l`
if [ -z "$X" ]
echo "user has logged in $X times in last 15 days"
else
echo "user has not logged in for 15 days"
usermod -L <user>
fi
done

To all the people on this forum: Please feel free to poke fun at me, as long as you teach me something!

To original poster: This code has not been tested and may or may not work. Please be careful.

Thanx savona!!! At least I got the direction to think...