Hello, In which file i configure the Ldap-Group Expiration? thanks Ivan Kalik wrote:

...

I would Like to know if there is a way to define an expiration time for all those users which belong to an LDAP Group, instead of defining this attribute for each of those users?

if(Ldap-Group == "some_group") { update control { Expiration := when } }

...

Moreover, after expiration time , RADIUS send an access-reject to the user. Is there any tool or something that send a message to the wifi users in a "windows form"?

You can configure the Reply-Message server sends with Access-Rejecy in raddb/modules/expoiration. No guarantee that it will be displayed to the user.

Ivan Kalik Kalik Informatika ISP

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- View this message in context: http://www.nabble.com/radiusExpiration-attirbute-declared-in-the-LdapGroup-t... Sent from the FreeRadius - User mailing list archive at Nabble.com.

I'm sorry man, i am new with this. Exactly in which file I configure ,and in which section of that file: radiusd.conf, or expiration module, or ldap module, users file? Because I know that in the users file radius can check ittems stored in the LDAP, only in a per user basis. But i would like to do that in a per ldap group basis. ---- if (LDAP-Group == blah) { update control { Expiration := "<wibble>" } } in which file do I confiugre Alexander Clouter wrote:

Hi,

aangles <aav_1984@hotmail.com> wrote:

...

I would Like to know if there is a way to define an expiration time for all those users which belong to an LDAP Group, instead of defining this attribute for each of those users?

Moreover, after expiration time , RADIUS send an access-reject to the user. Is there any tool or something that send a message to the wifi users in a "windows form"?

I think you have two options, some LDAP xlat'ing after you have called your LDAP autz module based around 'control:Ldap-UserDn' or alternatively (and probably better) is just to use some unlang to say: ---- if (LDAP-Group == blah) { update control { Expiration := "<wibble>" } } ----

Then called the 'expiration' module after that.

Cheers

-- Alexander Clouter .sigmonster says: Life is the urge to ecstasy.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- View this message in context: http://www.nabble.com/radiusExpiration-attirbute-declared-in-the-LdapGroup-t... Sent from the FreeRadius - User mailing list archive at Nabble.com.

Like this? DEFAULT guests-Ldap-Group == "cn=wlanguests,ou=Groups,dc=CELLS,dc=ES", Expiration := 09 Oct 2009 17:00, Auth-Type = LDAPGUESTS Because with this radius says: /etc/raddb/users[65]: Parse error (check) for entry DEFAULT: Expected end of line or comma and i tried to add a comma at the end of the line but still it says the same alert. Ivan Kalik wrote:

...

I'm sorry man, i am new with this. Exactly in which file I configure ,and in which section of that file: radiusd.conf, or expiration module, or ldap module, users file?

None of the above. In authorize section of default or inner-tunnel virtual server depending on the protocol used.

...

Because I know that in the users file radius can check ittems stored in the LDAP, only in a per user basis. But i would like to do that in a per ldap group basis.

If you like users file that much you can also put it there as DEFAULT entry:

DEFAULT Ldap-Group == "some_group", Expiration := when

Ivan Kalik Kalik Informatika ISP

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- View this message in context: http://www.nabble.com/radiusExpiration-attirbute-declared-in-the-LdapGroup-t... Sent from the FreeRadius - User mailing list archive at Nabble.com.