Script to email if users “other than” login

Question

Hey folks, I'm looking for an "alarm" script which will email if users other than those in a "authorised_users.txt" file log onto the VC 3 and/or esx 3 hosts. Allowed users can be created via VC permissions, however this would notify us if similiar role though unauthorised attempt to login.

Any thoughts?

Thanks in advance, Shane.

Answer 1

So you want to allow people to login who aren't allowed? Wouldn't it be easier just to deny them the ability to login?

Answer 2

You could write a script run through cron periodically to either run finger and see who is logged in, or to take a look at /var/log/wtmp and see who is/has logged in.

I'm with Matt though - why let them log-in at all?

Alternatively, you could alter the system .profile (/etc/profile) for all users, with a check in there to send an alert email and potentially log the user off, kill their session, etc.