On Wed, 7 Apr 2004, Kostas Zorbadelos wrote:
> At Tue, 6 Apr 2004 12:14:59 +0300 (EEST),
> Kostas Kalevras wrote:
> >
> Dear Kostas
> first of all thanks for your answer.
> I don't have this module compiled in the binary versions I compiled. I
> saw its source code however inside src/modules. Is it an experimental
> module that needs to be 'activated' in the configure step?
> What is its function exactly? (I know that you are the most relevant
> person to ask and I didn't see any documentation for it apart from the
> source code)
> Using this module can I achieve the locking senario I want? That is,
> when the user is logged in an ISDN line (has Simultaneous-Use=2)
> can I reject him if he tries to loggin as an ADSL at the same time?
Wel now that i think of it, the module can't really help you on that subject.
But in any case you can check the comments in the latest radiusd.conf, it's now
part of the stable modules list.
As for your problem, you can just always set Simultaneous-Use = 1. For ISDN you
just need to also set Port-Limit = 2 for the user to be able to use 2 channels.
So everything should work just fine with just that. Just make sure that
Port-Limit is only returned on ISDN connections, else a user can get 2 DSL
connections from the PTT and do multilink PPP (just guessing i am not that
familiar with how ADSL works, i think it just transmits PPP frames so it's
possible). Since you are using LDAP something like this:
--users--
DEFAULT NAS-Port-Type == ISDN, Ldap-Group == "adsl-users"
Port-Limit := 2
>
> Looking forward to your answer to also learn the role of your module.
>
> Kostas
>
> > On Mon, 5 Apr 2004, Kostas Zorbadelos wrote:
> >
> > >
> > >
> > > Hello to everyone.
> > > I have the following problem where I work. We have a user, lets say
> > > kzorba that is an ADSL user and has a specific profile (check and
> > > reply attributes). We want to limit the Simultaneous-Use of
> > > the user for this service to 1. We also want for the same user to be
> > > able to use an ISDN 128 backup connection in case his ADSL line has a
> > > problem. I this case our user has a different profile and
> > > Simultaneous-Use 2 (in order to be able to login twice for the 2 isdn
> > > channels). So the question is: how can I lock the user in a way that
> > > when he uses his ADSL connection, not to be able to connect with ISDN
> > > at all (that's easy since Simultaneous-Use is 1 in this case and won't
> > > be allowed to login for anything else) and the opposite (when in as an
> > > ISDN not to be able to use the ADSL).
> > > Any suggestions are highly appreciated.
> >
> > Since you keep different profiles for each connection (ADSL or ISDN) then you
> > can add a check item for the NAS-Port-Type (Virtual or ISDN) in each one and use
> > rlm_checkval to only allow the corresponding port-type for each profile.
> >
> > >
> > > Thanks in advance
> > >
> > > Kostas
> > >
> > > PS: By the way we have our user database in LDAP but I think that's
> > > irrelevant.
> > >
> > > -
> > > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> > >
> >
> > --
> > Kostas Kalevras Network Operations Center
> > [EMAIL PROTECTED] National Technical University of Athens, Greece
> > Work Phone: +30 210 7721861
> > 'Go back to the shadow' Gandalf
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
--
Kostas Kalevras Network Operations Center
[EMAIL PROTECTED] National Technical University of Athens, Greece
Work Phone: +30 210 7721861
'Go back to the shadow' Gandalf
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
