I have set up a solution where the login to our linux systems is regulated by microsoft active Directory and group memberships. Now i want the access time based so that the ad user will be kicked out of the system after a period of time.
I read few Things about RADIUS and its possibilities to do so eventuelly. What i want to accomplish is...
- ...that user a will be put into active directory login group but cannot login to the linux system.
- ... user a can call a website to request access to server x for a few hours or days but only when user a is in this ad group.
- ... user a will be activated for this Server using his/her ad credentials and if possible a second factor like one time password.
- ... user a get kicked out of system and wont be able to login again after the persiod of time.
Does anybody has experience with such a scenario or a similar one that could work here? Or knows some helpful Software to accomplish this Goal?