Since the NAS reply items are different for each NAS, I'd have to setup
3 full sets of check/reply items for each user. That sounds like
too much work. How would I do it by chaining the File authentications?
Since I'm using SQL Auth, Would this work?
Set DefaultSimultaneousUse to 1
Create a new sql table containing 2 fields:
username
check item
And use a LEFT OUTER JOIN to reference this table in the
Auth SQL stmt.
This way the check item would be null for everyone except for users that
have an row in this table. The row for these users
would have thier 'check item' column set to 'Simultaneous-Use = 2'
On Fri, 11 Jun 1999, Mike McCauley wrote:
> Hi James.
>
> For complicated reasons, that wont work the way you expect, even if you use the
> DefaultSimultaneousUse parameter I mentioned recently. I think you will have to
> set up a full set of check and reply items for each special user. There are
> other ways to tackle this, involving chaining FILE authentication. Do you want
> to talk about that?
>
>
> Cheers.
>
>
> On Jun 10, 10:38pm, James H. Thompson wrote:
> > Subject: (RADIATOR) Simultaneous use
> > I have only a handful of users that are allowed to do 2 simultaneous
> > logins. I want to restrict them to two logins, and everyone else to one.
> >
> >
> > Will this work?
> >
> > In the realm:
> > MaxSessions 1
> >
> > In the users file:
> >
> > #users with dual login priv
> > user1 Simultaneous-Use = 2
> > Fall-Through = yes
> >
> > user2 Simultaneous-Use = 2
> > Fall-Through = yes
> >
> > # Shiva
> > DEFAULT NAS-Identifier = "LRD56_82BE00", Auth-Type = ljnet_sql
> > Service-Type = Framed-User,
> > Framed-Protocol = PPP,
> > Framed-Compression = Van-Jacobson-TCP-IP
> > Idle-Timeout = 400
> >
> > # Nortel
> > DEFAULT NAS-Identifier = "las-nortel", Auth-Type = ljnet_sql
> > Service-Type = Framed-User,
> > Framed-Protocol = PPP,
> > Framed-Compression = Van-Jacobson-TCP-IP
> > Idle-Timeout = 200
> >
> >
> > # TCR
> > DEFAULT Auth-Type = ljnet_sql
> > Service-Type = Framed-User,
> > Framed-Protocol = PPP,
> > Idle-Timeout = 900
> >
> >
> >
> >
> >
> > Jim
> > [EMAIL PROTECTED]
> >
> >
> > ===
> > Archive at http://www.thesite.com.au/~radiator/
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
> >-- End of excerpt from James H. Thompson
>
>
>
> --
> Mike McCauley [EMAIL PROTECTED]
> Open System Consultants Pty. Ltd Unix, Perl, Motif, C++, WWW
> 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au
> Phone +61 3 9598-0985 Fax +61 3 9598-0955
>
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
> NT, Rhapsody
>
>
Jim
[EMAIL PROTECTED]
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
