Temporary Accounts

Thibault Le Meur Thibault.LeMeur at supelec.fr
Mon Nov 27 19:21:43 CET 2006


I'm replying to myself because I found a very ugly solution to cope with my
needs: "Have an account not available before a given date".

I post this here in case this could be useful to someone, and to get
feedback if others have found better way to achieve this.

> >>
> >> At least the following checks do not work:
> >> * Current-Time > "19 Nov 2006"
> >> * Current-Time > "2006/11/19"
> >
> >   The date format is the same as for Login-Time.
> >
> >   Alan DeKok.
> 
> If this is the case, then I'm afraid I won't be able to get the full  
> date like "19 Nov 2006". Indeed, as far as I know (but I hope I'm  
> wrong),  the UUCP Time Strings doesn't contain the Month nor the Day  
> of month (I've read 
> http://www.delorie.com/gnu/docs/uucp/uucp_58.html).
> 
> Is there another (Internal) Attribute, that could match these 
> elements  
> of a login date ?

I eventually get it working by:
* using the hint file:
DEFAULT NAS-IP-ADDRESS == MYNASIP
	MYSTRINGAATRIBUTE-NOTBEFORE := `%D`

* Checking the MYSTRINGATTRIBUTE-NOTBEFORE in the users file
DEFAULT MYSQTRINGATTRIBUTE-NOTBEFORE >= '20061128', Expiration := '29 Nov
2006'

I have then 2 questions:
* for the moment I use (or mis-use) an existing String-attribute from a
vendor dictionary: is there a way to define 'private Radius attributes' in
order to avoid this 'attribute usurpation' ?
* I've seen in the code that adding the Not-Before config attribute (similar
to Expiration) to Freeradius shouldn't be too tricky: is it something that
could prove to be useful for other users ?

Thibault 






More information about the Freeradius-Users mailing list