(RADIATOR) sesion-timeout per client

[Hugh Irvine]

Hello Arwin -


>Hello,
>
>How can I add a session-timeout attribute on a per client basis?
>When I use AddToReply SessionTimeout=1800 in a handler, it works fine for
>this handler.
>But I want to do this on a per client basis. I think I'll have to use some
>sort of hook,
>but the client clause only knows PreHandlerHook in wich you can't add
>reply-attributes ...
>

You have a couple of options for doing this. The first thing to do is 
use Identifiers in the Client clauses:

# define Clients

<Client .....>
	Identifier XXX
	....
</Client>

<Client .....>
	Identifier YYY
</Client>

# define Handlers

<Handler Client-Identifier = XXX>
	.....
	AddToReply Session-Timeout = 1800
	....
</Handler>

<Handler Client-Identifier = YYY>
	......
</Handler>


Another possibility is to use cascaded AuthBy clauses like this:

# define AuthBy clauses

<AuthBy ....>
	Identifier YourNormalAuthBy
	....
</AuthBy>

<AuthBy FILE>
	Identifier CheckClients
	Filename %D/checkclients
</AuthBy>

# define Realms or Handlers

<Handler ...>
	.....
	AuthBy CheckClients
	.....
</Handler>


Then the file checkclients would contain something like this:

# checkclients

DEFAULT Client-Identifier = XXX, Auth-Type = YourNormalAuthBy
	Session-Timeout = 1800,
	......

DEFAULT Client-Identifier = YYY, Auth-Type = YourNormalAuthBy
	.....


There are other options too.

regards

Hugh




-- 

NB: I am travelling this week, so there may be delays in our correspondence.

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.