unlang question

tnt at kalik.net tnt at kalik.net
Fri Mar 20 13:25:17 CET 2009


>I do not want visitors to be able to get onto the original service, and I
>do not want normal users to get onto the visitor service.
>
>My thoughts are to set up a new virtual server and add an 'if' statement
>to look for the visitor user names, and reject or allow as necessary.
>
>something like this in the new virtual server
>
>if ( Stripped-User-Name != /visitor[0-9]?[0-9]/i ) { reject }
>
>and the inverse for the old service.
>
>if ( Stripped-User-Name =~ /visitor[0-9]?[0-9]/i ) { reject }
>
>Is this syntax correct ? and where do I put it?

What about the service? You probably want:

if( Service-Type == whatever && Stripped-User-Name !=
/visitor[0-9]?[0-9]/i ) {
     reject
}

That goes in authorize section.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list