Re: users accounts that don't save data

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Craig White
Date:  
To: nathan, Main PLUG discussion list
Subject: Re: users accounts that don't save data
On Tue, 2007-03-20 at 09:05 -0700, Nathan Aubrey wrote:
> On Tuesday 20 March 2007, you wrote:
> > ---- Nathan Aubrey <> wrote:
> > > On Monday 19 March 2007, Craig White wrote:
> > > > looking for a way to have user accounts (local or ldap) whose data is
> > > > erased (not saved) upon logout.
> > > >
> > > > Are there any methods that can accomplish this?
> > >
> > > Make sure you have it setup to create their account with pam on login,
> > > then when logging out edit the .bash_logout file to delete their homedir.
> > > When they login again, it will be re-created. Make sure everything they
> > > need to login is ready in the /etc/skel file, including the correct
> > > .bash_logout file
> >
> > you know I thought something like this would work, but after looking at the
> > bash man page for a while, I'm not sure.
> >
> > 1) you would have to make certain when you create the directory that you
> > create a .bash_logout that is owned by root, and that the perms don't allow
> > any other user to edit .bash_logout.
> >
> > 2) also, can you delete a parent directory while reading a file in it? that
> > would be the case if you are executing .bash_logout while trying to delete
> > its parent directory.
> >
> > Jerry
> >
>
> If the .bash_logout script calls an external script, say
>
> /usr/bin/remove_user $user
>
> Setup the pammkdir to create the users directory with permissions so a user
> can delete his own home folder, then make the /usr/bin/remove_user script do
> a simple check to verify the user requesting the deletion is the same as the
> one who owns the folder.
>
> it should be pretty simple to setup.

----
thanks to all - interestingly everyone seemed to point to .bash_logout
and deleting the users' $HOME

I was hoping to do something more like a Windows 'Mandatory' profile
which is a pre-configured profile but locked though I presume that I
could just keep a copy of that profile somewhere and using .bash_logout,
copy this directory into place of the now logged out home directory.

Craig

---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss