NotBefore, NotAfter or Date attributes fot temporary accounts
In an old post Alan DeKok said he would patch freeradius to support temporary accounts using attributes like Date > "January 1 2010 13:00" Date > "January 12 2010 13:00" or Not-Before := "January 1 2010 13:00" Not-After := "January 12 2010 13:00" Somebody knows if such a feature has ever been included in Freeradius? Expiration attribute doesn't permit a "not-before" behaviour, Login-Time attribute doesn't permit month/year specification. Daniele Albrizio ======================== Old Post ===============================
-----Message d'origine----- De : [EMAIL PROTECTED] radius.org [EMAIL PROTECTED] sts.freeradius.org] De la part de Alan DeKok Envoyé : lundi 11 décembre 2006 19:47 À : FreeRadius users mailing list Objet : Re: NotBefore and Epiration (was Temporary Accounts), Enhancement proposal
Thibault Le Meur wrote:
Enhancement proposal ====================
Why not implement the NotBefore part in the FR server code as it is already done for Expiration ?
Or, add a "Date" attribute, that will compare against the current date. You can then use configurations like:
Date > "January 12 2006 13:00"
And it should Just Work.
Sure, this is a simpler way to do so. The only difference will be that the reply message will not say "Password has expired" or "Password not valid yet"... which, as far as I am concerned is not very important ;-)
I'll see if I can get a patch into 1.1.4.
Thanks a lot... Thibault
Alan DeKok wrote:
Daniele Albrizio wrote:
In an old post Alan DeKok said he would patch freeradius to support temporary accounts using attributes like
Date > "January 1 2010 13:00" Date > "January 12 2010 13:00"
Use "Current-Time".
Good. Do you know where can I find the syntax for the values of the "Current-Time" attribute? Is the date format is the same as for Login-Time ? UUCP intervals? In that case I cannot specify (for example) the sole december month, right? In fact if I specify in sql a check as Current-Tyme >= October 12 2009 13:00 the user gets rejected because the condition doesn't seem to match: ++[sql] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop No authenticate method (Auth-Type) configuration found for the request: Rejecting the user --
Daniele Albrizio wrote:
Good. Do you know where can I find the syntax for the values of the "Current-Time" attribute?
It's a date.
Is the date format is the same as for Login-Time ? UUCP intervals? In that case I cannot specify (for example) the sole december month, right?
In fact if I specify in sql a check as
Current-Tyme >= October 12 2009 13:00
the user gets rejected because the condition doesn't seem to match:
So.... try it with "unlang" first. That offers more visibility into what's going on. Alan DeKok.
participants (2)
-
Alan DeKok -
Daniele Albrizio