Hi all, this's my first post in this list at this time!!! i need some users can connect at least 3 times in a hour, for example if user1 connect at 8:00 AM limit him connect again in 15 minutes again, really i try it but not work for me. PLEASE THANKS in advance Johndoesms PD) sorry for my english i do not speak it
really i am researching the mode to do it, i think it's posible to do with max-access-period-time , but i do not understand it very well. Could somebody help me? Thanks in advance Hermidio --- El dom, 30/9/12, Alan DeKok <aland@deployingradius.com> escribió:
De: Alan DeKok <aland@deployingradius.com> Asunto: Re: access-period-time Para: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Fecha: domingo, 30 de septiembre, 2012 08:58 John Doe wrote:
i need some users can connect at least 3 times in a hour, for example if user1 connect at 8:00 AM limit him connect again in 15 minutes again, really i try it but not work for me.
What have you tried?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
John Doe wrote:
really i am researching the mode to do it, i think it's posible to do with max-access-period-time , but i do not understand it very well.
Could somebody help me?
Learn to ask good questions. "I tried stuff and it didn't work". That isn't a useful message. Alan DeKok.
i just asking if it's posible to do!!! Can you help me on this way? Thanks again Hermidio --- El lun, 1/10/12, Alan DeKok <aland@deployingradius.com> escribió:
De: Alan DeKok <aland@deployingradius.com> Asunto: Re: access-period-time Para: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Fecha: lunes, 1 de octubre, 2012 15:24 John Doe wrote:
really i am researching the mode to do it, i think it's posible to do with max-access-period-time , but i do not understand it very well.
Could somebody help me?
Learn to ask good questions. "I tried stuff and it didn't work".
That isn't a useful message.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
John Doe wrote:
i just asking if it's posible to do!!!
To do... what? You have tried very hard to say as little as possible about what you're doing.
Can you help me on this way?
Apparently not. You need to take the effort to describe what you want. You need to take the effort to describe what you configured. You need to take the effort to describe what tests you ran. You need to take the effort to describe what happened. When you take your car to a mechanic, you don't say "It's broken. Fix it." You give him SOME kind of description of what the problem is. Learn how to ask good questions. We trying to help you, and can't. The ONLY reason is you're not describing what you're doing. Alan DeKok.
On Mon, Oct 1, 2012 at 8:18 PM, John Doe <johndoesms@yahoo.es> wrote:
really i am researching the mode to do it, i think it's posible to do with max-access-period-time , but i do not understand it very well.
Start by defining what you want. And learn to write english correctly. It doesn't have to be perfect, just enough for others to understand. "i need some users can connect at least 3 times in a hour" What does that mean? by default there's no limitation on how many times a user can connect, so that part is irrelevant. Or do you mean "i need some users can connect at MOST 3 times in a hour"? "if user1 connect at 8:00 AM limit him connect again in 15 minutes again" Again, what does that mean? You want him to connect at most 15 minutes? You want to limit the next login to be AT LEAST 15 minutes from the last login? Also, think of real use-case. FR can pretty much does anything you tell it to, assuming you know what you want, and know how to write the rules. However remember that many "fancy" rules have no real use case, while (on certain cases) adding load to the system. -- Fajar
Yeah, so sorry if you do not understand me!! this's what i want Again, what does that mean? You want him to connect at most 15 minutes? You want to limit the next login to be AT LEAST 15 minutes from the last login? It's posible to do it? Thanks --- El lun, 1/10/12, Fajar A. Nugraha <list@fajar.net> escribió:
De: Fajar A. Nugraha <list@fajar.net> Asunto: Re: access-period-time Para: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Fecha: lunes, 1 de octubre, 2012 15:36 On Mon, Oct 1, 2012 at 8:18 PM, John Doe <johndoesms@yahoo.es> wrote:
really i am researching the mode to do it, i think it's posible to do with max-access-period-time , but i do not understand it very well.
Start by defining what you want. And learn to write english correctly. It doesn't have to be perfect, just enough for others to understand.
"i need some users can connect at least 3 times in a hour"
What does that mean? by default there's no limitation on how many times a user can connect, so that part is irrelevant. Or do you mean "i need some users can connect at MOST 3 times in a hour"?
"if user1 connect at 8:00 AM limit him connect again in 15 minutes again"
Again, what does that mean? You want him to connect at most 15 minutes? You want to limit the next login to be AT LEAST 15 minutes from the last login?
Also, think of real use-case. FR can pretty much does anything you tell it to, assuming you know what you want, and know how to write the rules. However remember that many "fancy" rules have no real use case, while (on certain cases) adding load to the system.
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
John Doe wrote:
Yeah, so sorry if you do not understand me!!
this's what i want
Again, what does that mean? You want him to connect at most 15 minutes? You want to limit the next login to be AT LEAST 15 minutes from the last login?
That's a series of questions. It's not a description of what you want.
It's posible to do it?
I have no idea. You are trying VERY hard to avoid following instructions. I gave detailed instructions, and you didn't follow them. Follow instructions or you will be unsubscribed and banned. Alan DeKok.
On Mon, Oct 1, 2012 at 9:14 PM, John Doe <johndoesms@yahoo.es> wrote:
Yeah, so sorry if you do not understand me!!
this's what i want
Again, what does that mean? You want him to connect at most 15 minutes? You want to limit the next login to be AT LEAST 15 minutes from the last login?
Please learn english. Seriously :)
It's posible to do it?
With such limited understanding, the best I can say is "probably". See http://wiki.freeradius.org/guide/lockout for an example that Phil created on how to log a failed auth to db and create policy based on that log (in that example, reject when failed login > 5 in the last hour). You should be able to adapt the mehcanism (i.e. using db as log) for your needs, although the queries will obviously be different in your case. -- Fajar
participants (3)
-
Alan DeKok -
Fajar A. Nugraha -
John Doe