Re: Limiting number ports to groups of users

2002-12-03 Thread Alan DeKok
Graeme Lee <[EMAIL PROTECTED]> wrote:
> Was this ever answered?  I too, need to limit the numbers of ports
> available to groups of users.

  It can't be done right now.  You'll have to write code and/or a
script yourself.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Limiting number ports to groups of users

2002-12-02 Thread Graeme Lee
Was this ever answered?  I too, need to limit the numbers of ports available to groups of users.

I'm not using sql, and don't really want to. As I run different groups on different radius servers (all nas's talk to 1 radius proxy) can I limit using radutmp?  There are no clear docs on this if it is true.

Thanks,

Graeme


Message: 13
Date: Wed, 12 Jun 2002 18:22:49 +0200 (CEST)
From: Daniel Marquez-Klaka <[EMAIL PROTECTED]>
To: freeradius-users Mail-List <[EMAIL PROTECTED]>
Subject: Re: port limitation
Reply-To: [EMAIL PROTECTED]


Hi again,

but isn't Simultaneous-Use only taking care about same usernames ?
What i want is to limit the usable ports per customer. To explain a bit
better:

I'm using mysql as backend for freeradius. There is ,of cause, the
usergroup table:

1 user-1 group-1
2 user-2 group-1
3 user-3 group-1
4 user-4 group-2
5 user-5 group-2
...


what i wanna archieve is to limit the usable ports per group.
i.e. group-1 can use up to 10 ports, group-2 up to 1000.


 or did i get something wrong,

Daniel


On Wed, 12 Jun 2002, Alan DeKok wrote:



Daniel Marquez-Klaka <[EMAIL PROTECTED]> wrote:

 

hmmm, but isn't it posible that radius keeps track about how many
sessions are connected for a group or dialed number, and send back
an access-reject if the limit is reached ?

   


 That's what Simultaneous-Use does.  But it's not perfect.

 e.g. It relies on getting accounting packets from the NAS.  If
there's a problem, then the information on the RADIUS server disagrees
with what's happening on the NAS.

 If you have one NAS, setting 'Port-Limit=1' is preferable to
Simultaneous-Use.

 Alan DeKok.




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html