Re: Additional Restrictions for users

2010-09-27 Thread William Burnett
Alright, Glad I asked, I've been trying different variations for half an hour. I ended up just created an if - elsif statement since I only had three static groups, but thought the regexp model would be less taxing than processing each if statement. if (Service-Type == "Login-User") {

Re: Additional Restrictions for users

2010-09-27 Thread Alexander Clouter
William Burnett wrote: > > Thanks that helped I've got the conditions to match. However I've > setup multiple groups: > > ssh-admin > ssh-read > ssh-write > > and want to use a regexp to match anything containing ssh-* to allow > those users to authenticate instead of multiple lines matching ea

Re: Additional Restrictions for users

2010-09-27 Thread Alan DeKok
William Burnett wrote: > Thanks that helped I've got the conditions to match. However I've > setup multiple groups: ... > and want to use a regexp That won't work. The current code checks for equality, not regex. > to match anything containing ssh-* to allow > those users to authenticate inst

Re: Additional Restrictions for users

2010-09-27 Thread William Burnett
Alan, Thanks that helped I've got the conditions to match. However I've setup multiple groups: ssh-admin ssh-read ssh-write and want to use a regexp to match anything containing ssh-* to allow those users to authenticate instead of multiple lines matching each value. Can I use regex matching wit

Re: Additional Restrictions for users

2010-09-25 Thread Alan DeKok
William Burnett wrote: > What is the best way to go about this? I was trying to use unlang to > query my database but can't seem to get the syntax right. The "sql" module queries databases. ... > if ( %{group_membership_query} == "ssh") { This won't do what you want. Instead

Additional Restrictions for users

2010-09-24 Thread William Burnett
I currently have my RADIUS servers setup to handle authentication for my various NAS's to grant users access to network resources. I would like to use the same servers to handle authentication for SSH for various routers. This all works, but I'm having a hard time getting the RADIUS server to only