Temporary Accounts
Thibault Le Meur
Thibault.LeMeur at supelec.fr
Mon Nov 27 19:21:43 CET 2006
I'm replying to myself because I found a very ugly solution to cope with my
needs: "Have an account not available before a given date".
I post this here in case this could be useful to someone, and to get
feedback if others have found better way to achieve this.
> >>
> >> At least the following checks do not work:
> >> * Current-Time > "19 Nov 2006"
> >> * Current-Time > "2006/11/19"
> >
> > The date format is the same as for Login-Time.
> >
> > Alan DeKok.
>
> If this is the case, then I'm afraid I won't be able to get the full
> date like "19 Nov 2006". Indeed, as far as I know (but I hope I'm
> wrong), the UUCP Time Strings doesn't contain the Month nor the Day
> of month (I've read
> http://www.delorie.com/gnu/docs/uucp/uucp_58.html).
>
> Is there another (Internal) Attribute, that could match these
> elements
> of a login date ?
I eventually get it working by:
* using the hint file:
DEFAULT NAS-IP-ADDRESS == MYNASIP
MYSTRINGAATRIBUTE-NOTBEFORE := `%D`
* Checking the MYSTRINGATTRIBUTE-NOTBEFORE in the users file
DEFAULT MYSQTRINGATTRIBUTE-NOTBEFORE >= '20061128', Expiration := '29 Nov
2006'
I have then 2 questions:
* for the moment I use (or mis-use) an existing String-attribute from a
vendor dictionary: is there a way to define 'private Radius attributes' in
order to avoid this 'attribute usurpation' ?
* I've seen in the code that adding the Not-Before config attribute (similar
to Expiration) to Freeradius shouldn't be too tricky: is it something that
could prove to be useful for other users ?
Thibault
More information about the Freeradius-Users
mailing list