How can I limit the number of desktop machines, within a private, all-Linux LDAP-authenticated network, that a single user account is logged in to at one time?
Here is the scenario to prevent: A user with a valid account logs in on that same account to 10 different desktops so that he can play games with his 9 friends; none of those friends have valid accounts on the network.
The server is RHEL 5 with OpenLDAP, desktops are Fedora 11 (will be CentOS 5.4 when available). All desktop logins are via LDAP on the server.
Note: Limiting concurrent logins on a single machine can be done with maxlogins
in /etc/security/limits.conf
, but this is useless in the stated scenario.
Also note: On a Windows network with Active Directory, software such as UserLock and LimitLogin can accomplish this; but this network has no Windows and no AD server.
EDIT: I realize LDAP can't do this by itself; if there is a mature, well-tested add-on product, similar to the aforementioned Windows-based products, then that would be good news. I will even consider non-gratis/non-libre solutions.