Hello, could someone give me a hints about how to reach a configuration when users with anonymous/guest account are able to access for limited time only and then blocked for some period of time? Example: 1. First user log in as guest/guest. 2. Access is granted for FIRST user and his device for let say 15 minutes only. 3. Second use log in as guest/guest. 4. Access is granted for SECOND user and his device for 15 minutes only. 5. Access for FIRST user expires. 6. Access for SECOND user expires. Is it possible to configurate such a behaviour with SQL user storage? Thank you very much for any hint or configuration example. CyAndrew -- View this message in context: http://freeradius.1045715.n5.nabble.com/Limit-guest-anonymous-users-for-15-m... Sent from the FreeRadius - User mailing list archive at Nabble.com.
On Tue, Sep 27, 2011 at 7:08 PM, CyAndrew <pohoda@seznam.cz> wrote:
Example: 1. First user log in as guest/guest. 2. Access is granted for FIRST user and his device for let say 15 minutes only. 3. Second use log in as guest/guest. 4. Access is granted for SECOND user and his device for 15 minutes only. 5. Access for FIRST user expires. 6. Access for SECOND user expires.
Is it possible to configurate such a behaviour with SQL user storage?
Thank you very much for any hint or configuration example. CyAndrew
If your requirements are complex it might be better for your to use rlm_perl and write your own rule there. There's Session-timeout attribute which should be honored by many NAS, which should restrict a session for only a specified amount of time, but it does not prevent the user from simply re-login from the same device later. -- Fajar
Le 27/09/2011 14:08, CyAndrew a écrit :
Hello,
could someone give me a hints about how to reach a configuration when users with anonymous/guest account are able to access for limited time only and then blocked for some period of time?
Example: 1. First user log in as guest/guest. 2. Access is granted for FIRST user and his device for let say 15 minutes only. 3. Second use log in as guest/guest. 4. Access is granted for SECOND user and his device for 15 minutes only. 5. Access for FIRST user expires. 6. Access for SECOND user expires.
Is it possible to configurate such a behaviour with SQL user storage? Unless I missunderstood, I would say that you must not use simultaneous checking to set up things. Well at least not the regular way. But writing a customised simultaneous_query_check would maybe help you achieve this. In short, make you simultaneous_check_query check for the pair user/device in your accounting database no matter if session has ended or not.
I don't know how clever it is, as if your acct database is large, it may (or may not) slow down the authentification process to death.
Thank you very much for any hint or configuration example. CyAndrew
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Limit-guest-anonymous-users-for-15-m... Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- <http://www.horoa.net> Alexandre Chapellon Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
Thank you very much for both answers. I'm prepared to use some extensions for described logic. Perl might be a choice as well as simultaneous_check_query approach. There will be limited (hundreds) of users so it should not make such a big performance issue. But do you know if session time is releated in SQL schema for each device using the same guest/guest account separately? Or is there only for record with session time-out for all devices under this account? Thank you once again. CyAndrew -- View this message in context: http://freeradius.1045715.n5.nabble.com/Limit-guest-anonymous-users-for-15-m... Sent from the FreeRadius - User mailing list archive at Nabble.com.
On Tue, Sep 27, 2011 at 9:19 PM, CyAndrew <pohoda@seznam.cz> wrote:
But do you know if session time is releated in SQL schema for each device using the same guest/guest account separately? Or is there only for record with session time-out for all devices under this account?
There should only be one. While users file (see "man 5 users") allows you to easily have many users line, each for a different user/device combination (the attribute holding the device MAC should be Calling-Station-Id), I haven't find a way to easily replicate that functionality with the default sql query/schema. A custom sql query/schema is always possible though. -- Fajar
Thank you, I will try to investigate custom sql solution and let you know. Best regards, CyAndrew -- View this message in context: http://freeradius.1045715.n5.nabble.com/Limit-guest-anonymous-users-for-15-m... Sent from the FreeRadius - User mailing list archive at Nabble.com.
Anybody can pls tell me about the guest login page..like first time will registration form will come and then the user will signed up and and it will be b automatically up by 30mins ... And also can I use textfree SMS account with free radius .. On Thursday, September 29, 2011, CyAndrew <pohoda@seznam.cz> wrote:
Thank you, I will try to investigate custom sql solution and let you know. Best regards, CyAndrew
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Limit-guest-anonymous-users-for-15-m... Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alexandre Chapellon -
CyAndrew -
Fajar A. Nugraha -
Zero Cool