Using unlang for authentication

Andrei Petru Mura mapandrei at gmail.com
Wed Aug 1 07:43:05 CEST 2012


Thanks Phil. It worked very well (that's what I was looking for).

Thanks in advance.

On Tue, Jul 31, 2012 at 3:31 PM, Phil Mayers <p.mayers at imperial.ac.uk>wrote:

> On 31/07/12 13:19, Andrei Petru Mura wrote:
>
>> I declared a new attribute on FR dictionary, called
>> CarboSolutions-NotBefore. This attribute should contain the data time as
>> a string before what the user should not be able to authenticate. That
>> attribute is placed in radcheck table (like: CarboSolutions-NotBefore >=
>> 20120801). I tried to deal with that following some threads from that
>> forum on similar issues, that sooner or later leads to unlang
>> procedures. I also read the unlang's man page. But I can't understand
>> how to deal with unlang. Can anyone help me to obtain what I need?
>>
>> What I need: I need that every authentication request, should contain an
>> CarboSolutions-NotBefore field with current date.
>>
>
> It isn't very clear what you want to do here, I'm afraid.
>
> What have you tried?
>
> If I understand you correctly, you want to store an attribute in the
> "radcheck" table that contains a date, and compare that date to "today".
>
> If so, you can do this:
>
> authorize {
>  ...
>  # put todays date into the attribute
>  update request {
>    CarboSolutions-NotBefore := "%Y%m%d"
>  }
>  # run SQL module
>  sql
>
>  ...
> }
>
> ...and in your radcheck table:
>
> insert into radcheck (username,attribute,op,val) values (
>   'username',
>   'CarboSolutions-NotBefore',
>   '>=',
>   '20120731'
> );
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/**
> list/users.html <http://www.freeradius.org/list/users.html>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120801/eb097238/attachment.html>


More information about the Freeradius-Users mailing list