I'm replying to myself because I found a very ugly solution to cope with my needs: "Have an account not available before a given date". I post this here in case this could be useful to someone, and to get feedback if others have found better way to achieve this.
At least the following checks do not work: * Current-Time > "19 Nov 2006" * Current-Time > "2006/11/19"
The date format is the same as for Login-Time.
Alan DeKok.
If this is the case, then I'm afraid I won't be able to get the full date like "19 Nov 2006". Indeed, as far as I know (but I hope I'm wrong), the UUCP Time Strings doesn't contain the Month nor the Day of month (I've read http://www.delorie.com/gnu/docs/uucp/uucp_58.html).
Is there another (Internal) Attribute, that could match these elements of a login date ?
I eventually get it working by: * using the hint file: DEFAULT NAS-IP-ADDRESS == MYNASIP MYSTRINGAATRIBUTE-NOTBEFORE := `%D` * Checking the MYSTRINGATTRIBUTE-NOTBEFORE in the users file DEFAULT MYSQTRINGATTRIBUTE-NOTBEFORE >= '20061128', Expiration := '29 Nov 2006' I have then 2 questions: * for the moment I use (or mis-use) an existing String-attribute from a vendor dictionary: is there a way to define 'private Radius attributes' in order to avoid this 'attribute usurpation' ? * I've seen in the code that adding the Not-Before config attribute (similar to Expiration) to Freeradius shouldn't be too tricky: is it something that could prove to be useful for other users ? Thibault