users advanced configuration

[Ivan Kalik]

Use groups in ldap and configure groupmembership part of radiusd.conf
ldap configuration. Add users to the groups and use:

DEFAULT   Ldap-Group = "heure", Max-Daily-Session := 3600

to set the attributes. Don't use Auth-Type. Ldap module should set 
Auth-Type ldap (see set_auth_type configuration option) itself.

Ivan Kalik
Kalik Informatika ISP


Dana 16/5/2008, "tribestom" <tribes.tom at gmail.com> piše:

>Hi
>
>I have a little hard to configure freeradius. here is what i want to
>do :
>
>I want to run an hotspot with different accounts which give different
>connection time.
>
>I have an openldap server  with this organisation :
>
>	dc=com
>	   |
>	dc=exempl
>
>	|	|
>   ou=heure    ou=jour
>    |		   |
> uid=user1      uid=user2
>
>
>What i have running now :
>
>I can authenticate a users with a time limit.
>
>Here is my users file :
>
>DEFAULT        Auth-Type = ldap,Max-Daily-Session := 3600
>
>I want add a second line with correspond to a day like this :
>
>DEFAULT        Auth-Type = ldap,Max-Daily-Session := 86400
>
> and i want that user from ou=heure use the first one and user from
>ou=jour use the policy with a day time
>
>which attribute should i add to this line or how should i do to realize
>this. I haven t found any clue on the net how to do this.
>
>Here is my ldap conf in radiusd.conf :
>
>server = "192.168.20.240" # ip de la machine avec le serveur ldap
>		identity = "cn=admin,dc=exempl,dc=lcom" # login sur le serveur ldap
>		password = "******" # mots de passe sur le serveur ldap
>		basedn = "dc=exempl,dc=com" # base de recherche sur le serveur ldap
>		filter ="uid=%u" # filtre de recherche ( ici tout utilisateur )
>		ldap_connections_number = 5 # nombre de tentative de connection
>		timeout = 4
>		timelimit = 3
>		net_timeout = 1
>		tls {
>			start_tls = no
>		}
>		dictionary_mapping = ${raddbdir}/ldap.attrmap
>		edir_account_policy_check = no
>
>Sorry for my bad english and thanks for your help
>
>If you need more informations just tell me
>
>
>Tribolet
>Thomas
>
>
>
>
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>