Hello. I am in the process of setting up a home network where 2 of the users
will be kids. Because of this, I have decided that it would be nice to have
a login time restriction for thier XP workstations, as well as an automatic
logoff time. This can be done with any Windows domain controller, and I've
had halfway luck with Samba.
What I've done so far... I've gotten Samba to use PAM to enforce login
time
restrictions. Kid tries to log on outside of his hours, and he is denied
access. Wonderful, and it works like a charm. The problem comes in if the
kid logs in at 7:59, and his time window ends at 8:00. Windows cheerfully
stays logged in, however, Samba then makes all the shares unavailable (as it
should), and then when they finally do log off (after staying on for however
long when they weren't supposed to :) ) Windows obviously complains about
the roaming profile not being able to be saved, because of course Samba has
made that share unavailable.
I can get software that will enforce the workstation to log off at a certain
time and this is good, but it seems to me that this would have to be
orchestrated with time sync so that the workstation is logged out and the
roaming profile copied back up to the server *before* 8:00, otherwise Samba
is gonna cut the connection. Lots of variables come into play here: What if
I tell the logoff software to log the kid off at 7:59:30, and it takes more
than 30 seconds to copy the roaming profile back up? What if I tell it to
log off the workstation at 7:59, the roaming profile copies up in 20
seconds, and the kid gets smart and logs right back in the remaining 40
seconds?
Anyone got any ideas? I welcome any :)
Thanks.