I'm sorry man, i am new with this. Exactly in which file I configure ,and in which section of that file: radiusd.conf, or expiration module, or ldap module, users file? Because I know that in the users file radius can check ittems stored in the LDAP, only in a per user basis. But i would like to do that in a per ldap group basis. ---- if (LDAP-Group == blah) { update control { Expiration := "<wibble>" } } in which file do I confiugre Alexander Clouter wrote:
Hi,
aangles <aav_1984@hotmail.com> wrote:
I would Like to know if there is a way to define an expiration time for all those users which belong to an LDAP Group, instead of defining this attribute for each of those users?
Moreover, after expiration time , RADIUS send an access-reject to the user. Is there any tool or something that send a message to the wifi users in a "windows form"?
I think you have two options, some LDAP xlat'ing after you have called your LDAP autz module based around 'control:Ldap-UserDn' or alternatively (and probably better) is just to use some unlang to say: ---- if (LDAP-Group == blah) { update control { Expiration := "<wibble>" } } ----
Then called the 'expiration' module after that.
Cheers
-- Alexander Clouter .sigmonster says: Life is the urge to ecstasy.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/radiusExpiration-attirbute-declared-in-the-LdapGroup-t... Sent from the FreeRadius - User mailing list archive at Nabble.com.