PowerLogin lets system administrators control which users can log in to each UNIX machine under which circumstances. Using a flexible login policy language, system administrators can specify such things as what time of day a user may log in, who may log in over modem lines or over the network, whether additional passwords or authentication schemes are used, and so on.
PowerLogin also includes a flexible password-aging system, which is compatible with NIS and shadow passwords, and works across an entire UNIX network. Also, PowerLogin can be easily integrated with authentication mechanisms such as smart cards, to further enhance login security.
PowerLogin contains a complete centralized logging system which tracks all login activity, and allows complex queries to be made as to what activities have occurred. In addition, PowerLogin allows the login environment for each user to be completely specified. Administrators can control whether a shell or some other program is invoked for the user, what directory the user is placed in, and what environment variables are set, among other things. An optional auto-logout facility guards against security problems caused by users leaving a machine without logging out.
PowerLogin includes centralized control and logging as well as full hot-switchover to standby machines if a primary PowerLogin server becomes unavailable. No kernel or application modifications are required, and PowerLogin administration can be done on-the-fly without making the system unavailable, making it suitable for 24 hour-per-day production environments.
PowerLogin will be of particular interest to large commercial and technical sites which need to tailor the login environment across their UNIX networks, and keep a centralized indelible audit trail of all login activity.
PowerLogin is scheduled for release simultaneously on Sun, HP, IBM, DEC, SGI, and Motorola UNIX platforms. For more information on PowerLogin, please contact FSA Corp. at (403) 264 4822, by fax at (403) 264 0873, or by e-mail at sales@fsa.ca.