Access based on eDirectory and Accounting

tnt at kalik.net tnt at kalik.net
Fri Jan 30 14:56:56 CET 2009


>> Yes. eDirectory will "replace" radcheck and radreply while accounting
>> will go to radacct.
>
>I was under the impression that radcheck would have to check
>eDirectory and accounting info.

No. eDirectory will be searched by ldap module.

>I want to allow access based on
>eDirectory credentials AND accounting info. So if the eDirectory
>credentials are correct Freeradius should check the accounting
>database and if the total bytes transferred is more than a value
>specified somewhere (either in eDirectory or SQL I suppose) reject
>access.

You can store (sql)counter limit in eDirectory. Just add the mapping to
ldap.attrmap.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list