Re: block users on-the-fly

2006-10-16 Thread Guilherme Franco
Thanks Owen On 10/16/06, Owen DeLong <[EMAIL PROTECTED]> wrote: On Oct 16, 2006, at 6:25 AM, Guilherme Franco wrote: > Hi, > > Does anyone already have a program to block freeradius on-the-fly? > > ie: user has PAID = YES in radcheck table. Whenever I set PAID = NO, > the user would no longer

Re: block users on-the-fly

2006-10-16 Thread Guilherme Franco
Thanks Jan, I'll consider this as well. Kinda impossible to do it from the hardware based NAS, so I'm writing a script for this. Thanks. On 10/16/06, Jan Mulders <[EMAIL PROTECTED]> wrote: I've been through exactly the same hell authenticating a bunch of VPN users. The fundamental problem is

Re: block users on-the-fly

2006-10-16 Thread Guilherme Franco
Thanks, I didn't know about the POD (it wasn't on the wiki when I've read it before) On 10/16/06, Peter Nixon <[EMAIL PROTECTED]> wrote: On Mon 16 Oct 2006 16:25, Guilherme Franco wrote: > Hi, > > Does anyone already have a program to block freeradius on-the-fly? > > ie: user has PAID = YES in r

Re: block users on-the-fly

2006-10-16 Thread Owen DeLong
On Oct 16, 2006, at 6:25 AM, Guilherme Franco wrote: Hi, Does anyone already have a program to block freeradius on-the-fly? ie: user has PAID = YES in radcheck table. Whenever I set PAID = NO, the user would no longer authenticate the next time he/ she logs in. OK, this works, but, if the use

Re: block users on-the-fly

2006-10-16 Thread Jan Mulders
I've been through exactly the same hell authenticating a bunch of VPN users. The fundamental problem is that FreeRADIUS is event-driven: ie, it can only do anything when someone sends a RADIUS request to it. This means, for our purposes, that freeradius needs to be *asked* if a user can continue

Re: block users on-the-fly

2006-10-16 Thread Peter Nixon
On Mon 16 Oct 2006 16:25, Guilherme Franco wrote: > Hi, > > Does anyone already have a program to block freeradius on-the-fly? > > ie: user has PAID = YES in radcheck table. Whenever I set PAID = NO, > the user would no longer authenticate the next time he/ she logs in. > OK, this works, but, if th

Re: block users on-the-fly

2006-10-16 Thread Peter Nixon
On Mon 16 Oct 2006 16:25, Guilherme Franco wrote: > Hi, > > Does anyone already have a program to block freeradius on-the-fly? > > ie: user has PAID = YES in radcheck table. Sure. Change: authorize_check_query = "SELECT id, UserName, Attribute, Value, Op \ FROM ${authcheck_table} \ WHERE Userna

block users on-the-fly

2006-10-16 Thread Guilherme Franco
Hi, Does anyone already have a program to block freeradius on-the-fly? ie: user has PAID = YES in radcheck table. Whenever I set PAID = NO, the user would no longer authenticate the next time he/ she logs in. OK, this works, but, if the user is already loged in, even if I set PAID = NO, the user