Re: Disabling User

2004-01-07 Thread Bill Campbell
On Wed, Jan 07, 2004, Devin Atencio wrote:
>
>I was wondering if there was an easy way to disable a user so that if they
>Try to dialup it would deny them access. Currently our method is we just 
>Change the user's password. I have tried to set Simulatenous-Use to 0 but
>That doesn't appear to work. Any ideas on a good way ?

I would think changing the password is easier than fiddling simulataneous
use.  Normally when using encrypted passwords, we disable the account by
prepending a ``*'' character to the encrypted password so now password will
work.  Then removing the ``*'' from the password enables the account
easily.

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

``When dealing with any spammer, one must always keep in mind that you
are dealing with someone who makes their living through forgery, fraud,
theft, subterfuge and obfuscation.  Stated simply, spammers lie.''
 David Ritz <[EMAIL PROTECTED]>

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Disabling User

2004-01-07 Thread Alan DeKok
"Devin Atencio" <[EMAIL PROTECTED]> wrote:
> I was wondering if there was an easy way to disable a user so that if they
> Try to dialup it would deny them access. Currently our method is we just 
> Change the user's password. I have tried to set Simulatenous-Use to 0 but
> That doesn't appear to work. Any ideas on a good way ?

  FAQ #5.2

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Disabling User

2004-01-07 Thread Anson Rinesmith
Just set their Auth-Type := Reject, no need to change the password.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Devin
Atencio
Sent: Wednesday, January 07, 2004 12:11 PM
To: [EMAIL PROTECTED]
Subject: Disabling User


I was wondering if there was an easy way to disable a user so that if they
Try to dialup it would deny them access. Currently our method is we just 
Change the user's password. I have tried to set Simulatenous-Use to 0 but
That doesn't appear to work. Any ideas on a good way ?



- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Disabling User

2004-01-07 Thread Bill Campbell
On Wed, Jan 07, 2004, Anson Rinesmith wrote:
>Just set their Auth-Type := Reject, no need to change the password.

That's fine for radius, but doesn't solve the larger problem (e.g. POP/IMAP
access and other things that depend on the password).

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

What's this script do?
unzip ; touch ; finger ; mount ; gasp ; yes ; umount ; sleep
Hint for the answer: not everything is computer-oriented. Sometimes you're
in a sleeping bag, camping out.
(Contributed by Frans van der Zande.)

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Disabling User

2004-01-07 Thread Richard Bailey
If it is a linux system try passwd -l username to lock account and passwd -u
username to unlock.

Richard
- Original Message - 
From: "Bill Campbell" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, January 07, 2004 1:27 PM
Subject: Re: Disabling User


> On Wed, Jan 07, 2004, Anson Rinesmith wrote:
> >Just set their Auth-Type := Reject, no need to change the password.
>
> That's fine for radius, but doesn't solve the larger problem (e.g.
POP/IMAP
> access and other things that depend on the password).
>
> Bill
> --
> INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
> UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
> FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206)
236-1676
> URL: http://www.celestial.com/
>
> What's this script do?
> unzip ; touch ; finger ; mount ; gasp ; yes ; umount ; sleep
> Hint for the answer: not everything is computer-oriented. Sometimes you're
> in a sleeping bag, camping out.
> (Contributed by Frans van der Zande.)
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Disabling User

2004-01-07 Thread Byron
We have a denyuser group and we move the username into, they are not allowed
to dial up but it will allow them to check mail. If you dont want them to
check mail I think the way you are doing it is easy and works..

byron
- Original Message -
From: "Devin Atencio" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, January 07, 2004 11:11 AM
Subject: Disabling User


>
> I was wondering if there was an easy way to disable a user so that if they
> Try to dialup it would deny them access. Currently our method is we just
> Change the user's password. I have tried to set Simulatenous-Use to 0 but
> That doesn't appear to work. Any ideas on a good way ?
>
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
>



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html