Change of Authorization

[Alan DeKok]

Jeffrey Sewell wrote:
> Apologies if this has been addressed before, but I can't find any
> references in the Wiki or the archives for the use of rfc 3576 Change
> of Authorization messages.

  The server doesn't support it, but there have been discussions around
the topic.

> Does FreeRADIUS have any built in way to trigger and/or send a CoA?

  radclient can send a CoA packet.  FreeRADIUS can be triggered to send
one by some policy decision, and fork a shell script that runs radclient.

> How have others dealt with users who have exceeded certain limits but
> have not yet reached session-timout?

  Run a script that runs radclient to send a disconnect or CoA packet.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog