Take a look also at www.xtradius.com which is a cistron-radius extension....
Bye
Nat
At 21.47 01/08/2000 -0500, you wrote:
> > Does anyone know how can I limit the access in radius to a group of users?
> > my users file is like this
>
>First of all, I use Cistron Radius, so some of this may be native to
>Cistron.
>
>I added groups to my Debian system... email, isdn1, isdn2,
>dedicate. Email-Only accounts can't get logged in. They
>don't pay for dial-up access, only POP accounts. They won't
>actually see the Reply-Message if the use Windows (MS doesn't
>follow the PPP specs on that one...).
>
>ISDN1 is allowed 56/64K only.
>ISDN2 is allowed 2 ISDN channels.
>Dedicate never gets kicked off (they pay for 24x7).
>
>Just add the user accounts to the proper groups on Debian.
>
># Users in the UNIX /etc/group 'email' group can't login....
>
>DEFAULT Group = "email", Auth-Type = Reject
> Reply-Message = "Your account is for email only"
>
>
>DEFAULT Group = "isdn1", Auth-Type = System, Simultaneous-Use = 1
> Port-Limit = 1,
> Fall-Through = Yes
>
>DEFAULT Group = "isdn2", Auth-Type = System, Simultaneous-Use = 2
> Port-Limit = 2,
> Fall-Through = Yes
>
>DEFAULT Group = "dedicate", Auth-Type = System, Simultaneous-Use = 1
> Service-Type = Framed-User,
> Framed-Protocol = PPP,
> Framed-IP-Address = 255.255.255.254,
> Framed-IP-Netmask = 255.255.255.255,
> Framed-Compression = Van-Jacobson-TCP-IP,
> Framed-MTU = 1500,
> Fall-Through = No
>
>
># All other accounts are to be checked against the UNIX /etc/passwd.
># Accounts are limited to 1 concurrent login, 6 hour session limit, and
># a 20 minute idle timer. Also, Analog calls Only! No ISDN!
>
>
>DEFAULT Auth-Type = System, Simultaneous-Use = 1
> Service-Type = Framed-User,
> Framed-Protocol = PPP,
> Framed-IP-Address = 255.255.255.254,
> Framed-IP-Netmask = 255.255.255.255,
> Framed-Compression = Van-Jacobson-TCP-IP,
> Framed-MTU = 1500,
> Session-Timeout = 21600,
> Idle-Timeout = 1200,
> Port-Limit = 0,
> Fall-Through = No
>
>
>Good Luck,
>Mark
>
>======================================================================
>Mark A. Bialik (414) 290-6749
>Network/Security Manager http://www.linux.org
>Infinity HealthCare, Inc. [EMAIL PROTECTED]
>Mequon, WI USA Debian/GNU Linux Documentation Project
>======================================================================
>
>
>--
>To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
