samba - Aug 2024 - Authentication hook to run extra checks before allowing Windows login

Hello all. Does Samba in AD mode provide any sort hooks to run a script 
when a user attempts to login, before replying to the authentication 
attempt? I need to prevent certain users from being logged in from more 
than one machine at the same time, and a script to check the username or 
account against a previously saved record of which machine they last 
logged in from and reject the authentication attempt might be able to 
accomplish this. Any ideas much appreciated.

Sebastian

On 30 August 2024 17:13 Sebastian Arcus wrote:
> 
> Hello all. Does Samba in AD mode provide any sort hooks to run a script
> when a user attempts to login, before replying to the authentication
> attempt? I need to prevent certain users from being logged in from more
> than one machine at the same time, and a script to check the username or
> account against a previously saved record of which machine they last
> logged in from and reject the authentication attempt might be able to
> accomplish this. Any ideas much appreciated.
> 
> Sebastian
I don't think samba has any means to do this, and it's not built-in to
AD, but take a look at this article for Windows client machines:
https://learn.microsoft.com/en-us/archive/technet-wiki/37839.active-directory-limit-concurrent-user-logins?WT.mc_id=email

HTH,

Spindles7