User accounts that expire and timeout

[Jon Pipitone]

Quoting Jaco van Tonder <jaco at alwayson.co.za>:

> The Expiration module does exactly what you require. It also calculates the
> correct session timeout and it is fine grained it uses the format
> "Expiration := 01 Sep 2005 12:00:00" in the radcheck table. What version of
> freeradius are you using? In older versions the granularity of the time was
> limited but I am using the version 1.4 with the CVS code for the expiration
> module compiled in and it works exactly as you require

Jaco, thanks a million.  That sounds perfect.  

It does seem a bit sketchy to be plugging in a module from CVS into an earlier
version of FreeRadius, but I'll give it a go.  When did you pull it from CVS? 
I'll try the latest sources, unless anyone could give me a reason not to?

Also, I should have mentioned, I'm running this all on Fedora Core 4, with
FreeRadius 1.0.4 and MySQL 4.1.11.  

As to your statement about putting "Expiration := 01 Sep 2005 12:00:00" in the
radcheck table, you do mean that I should put 'Expiration' as attribute, '10 Sep
2005 12:00:00' as the Value, right?  I only ask this because when I was trying
out the 'Expiration' attribute initially I found that FreeRadius was trying to
parse the 'Op' field for the date.   Weirdness... Anyway, I'll post back with my
findings.  

Thanks so much for your help, 
jp

> -----Original Message-----
> From: freeradius-users-bounces+jaco=alwayson.co.za at lists.freeradius.org
> [mailto:freeradius-users-bounces+jaco=alwayson.co.za at lists.freeradius.org]
> On Behalf Of Jon Pipitone
> Sent: 07 January 2006 08:15 AM
> To: freeradius-users at lists.freeradius.org
> Subject: User accounts that expire and timeout
> 
> Hey all,
> 
> I'm working to set up a wireless hotspot using mikrotik, freeradius, and
> mysql.
> Actually the initial setup went pretty smoothly, so a big thank you to
> everyone
> that contributed to the documentation and mailing lists.
> 
> Right now I'm looking to set up user accounts that are only valid for a
> certain
> date range (for instance, from today at noon until tomorrow at noon).  In
> essence I want to set some sort of expiry date on the user account.
> 
> But, as well, I'd like the session time limit for the user to be set so
> that
> the
> user can't stay logged in after the expire date (i.e. log in just before
> the
> expiry time and stay logged in for a few more hours.).  During the time
> when
> the
> account is valid (i.e. hasn't expired) the user should be able to log in
> and
> out
> as much as the'd like, or stay logged in for the entire time.  In other
> words,
> the Session-Timeout ought to be exactly the difference in time from when
> they
> log in to when the account expires.
> 
> I've done a bit of reading through the mailing list archives and the
> documentation.  I wasn't able to get the Expiration attribute to work (i
> can
> elaborate if need be), but then even if it did it isn't fine-grained enough
> (only down to the day) and I still wasn't sure how to automatically adjust
> the
> Session-Timeout.  I was toying with using a sqlcounter somehow, but I
> thought it
> best to ask for ideas before I dive in again.  
> 
> Thanks in advance,
> Regards,
> jon 
> - 
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 
> 
> 
> 
> - 
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>