(RADIATOR) Expirations more granular than one day
Allen Marsalis
am at shreve.net
Fri Aug 9 23:03:35 CDT 2002
Thanks much Hugh! I'll give that a whirl.. I doubt my RADIUS
client (NoCatAuth) will accept the reply attribute. FWIW,
it re-authenticates every 8 minutes so once the user
tries to re-authenticate after expiration, no más packets.. :)
Last may I ask what unit or format EXPIRY is? I'm thinking
that Epoch time or some date/timestamp format would be nice..
What timelocal format does AuthSelect use or expect in EXPIRY?
Allen
am at shreve.net
At 12:56 PM 8/10/2002 +1000, Hugh Irvine wrote:
>
>Hello Allen -
>
>It sounds like you need an EXPIRY field in your database, and an
>AuthSelect query that checks to make sure that the current time is less
>than the EXPIRY. For completeness you should probably also return a
>Session-Timeout that is set to the difference between the current time
>and the EXPIRY.
>
>regards
>
>Hugh
>
>
>On Saturday, August 10, 2002, at 12:30 PM, Allen Marsalis wrote:
>
>> Maybe I'm thinking too hard and should just describe what I want
>> to do which is pretty simple. I would like to authenticate users
>> for a time period which will deny authentication after the expiration
>> period elapses.. The period will be 1 hours from current time,
>> 24 hours from current time, or one month (approx 744 hours) from
>> current time. That's it. Can someone point me in the right
>> direction regarding exactly what attribute would be best for this?
>> I do not wish to disconnect the user but rather just not allow
>> a re-authentication after 1 hour, 1 day, or one month..
>>
>> Allen
>> am at shreve.net
>>
>>
>> At 05:40 PM 8/9/2002 +1000, Hugh Irvine wrote:
>> >
>> >Hello Allen -
>> >
>> >You should probably use Session-Timeout attributes to limit the
>> >connections.
>> >
>> >regards
>> >
>> >Hugh
>> >
>> >
>> >On Friday, August 9, 2002, at 08:59 AM, Allen Marsalis wrote:
>> >
>> >> Hi,
>> >>
>> >> I'm wanting to create accounts for wireless hotspots that
>> >> might expire after 30 min. or some interval that is measured
>> >> in minutes or hours rather than days..
>> >>
>> >> I looked at some RADIUS dictionaries and "expiration" is
>> >> of type "date".. What is the best way to implement a
>> >> policy such as this with Radiator? Does "date" include
>> >> epoch time? i.e. expiration=920000000 Will this work?
>> >> Is it the best approach?
>> >>
>> >> Thanks,
>> >>
>> >> Allen
>> >> am at shreve.net
>> >>
>> >> ===
>> >> Archive at http://www.open.com.au/archives/radiator/
>> >> Announcements on radiator-announce at open.com.au
>> >> To unsubscribe, email 'majordomo at open.com.au' with
>> >> 'unsubscribe radiator' in the body of the message.
>> >>
>> >>
>> >--
>> >Radiator: the most portable, flexible and configurable RADIUS server
>> >anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
>> >-
>> >Nets: internetwork inventory and management - graphical, extensible,
>> >flexible with hardware, software, platform and database independence.
>> >
>> >===
>> >Archive at http://www.open.com.au/archives/radiator/
>> >Announcements on radiator-announce at open.com.au
>> >To unsubscribe, email 'majordomo at open.com.au' with
>> >'unsubscribe radiator' in the body of the message.
>> >
>> >
>> ===
>> Archive at http://www.open.com.au/archives/radiator/
>> Announcements on radiator-announce at open.com.au
>> To unsubscribe, email 'majordomo at open.com.au' with
>> 'unsubscribe radiator' in the body of the message.
>>
>>
>--
>Radiator: the most portable, flexible and configurable RADIUS server
>anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
>-
>Nets: internetwork inventory and management - graphical, extensible,
>flexible with hardware, software, platform and database independence.
>
>===
>Archive at http://www.open.com.au/archives/radiator/
>Announcements on radiator-announce at open.com.au
>To unsubscribe, email 'majordomo at open.com.au' with
>'unsubscribe radiator' in the body of the message.
>
>
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list