Hello Ricky -
In the file that you use for the AuthBy FILE (%D/users) you could simply add
those users that you want to lock out like this:
# %d/users
user1 Password = *
......
hth
Hugh
On Friday 05 October 2001 01:06, ricky wrote:
> > Guys,
>
> I noticed a couple of years back someone asked for the ability to check a
> users shell for authentication.
>
> I am migrating from Merit and as such I have used what shell the customer
> had in the passwd file to lock them out if they had not payed.
>
> I guess I can assume that this is not possible with Radiator as there is
> nothing in the manual or many questions in the archive.
>
> How can I make this work another way. I am using AuthBy UNIX and FILE
> aready.
>
> Thanks
>
> Rick
>
>
>
> Foreground
> LogStdout
> LogDir /usr/local/radius/logs
> DbDir /usr/local/radius/raddb
> # User a lower trace level in production systems:
> Trace 4
>
> SnmpgetProg /usr/bin/snmpget
> FingerProg /usr/bin/finger
> AuthPort 1645
> AcctPort 1646
> # You will probably want to add other Clients to suit your site,
> # one for each NAS you want to work with
> <Client monty.caboolture.net.au>
> Secret xxx
> NasType Bay8000SNMP
> DupInterval 0
> IgnoreAcctSignature
> </Client>
>
> <Client monty1.caboolture.net.au>
> Secret xxx
> NasType Bay
> IgnoreAcctSignature
> DupInterval 0
> </Client>
>
> <Client 127.0.0.1>
> Secret xxx
> DupInterval 0
> </Client>
>
>
> <AuthBy UNIX>
> Identifier System
> Filename /etc/shadow
> </AuthBy>
>
> <AuthBy FILE>
> Identifier CheckUsers
> Filename %D/users
> </AuthBy>
>
> <AuthLog FILE>
> Identifier myauthlogger
> Filename %L/authlog
> LogSuccess 1
> LogFailure 1
> </AuthLog>
>
> <Realm DEFAULT>
> AuthBy CheckUsers
> AuthLog myauthlogger
>
> # Log accounting to a detail file
> AcctLogFileName %L/details
>
> AcctLogFileFormat EXEC sp_ins_rad%{Acct-Status-Type} \
> @login_time='%Y-%m-%d %H:%M:%S', \
> @acct_session_id='%{Acct-Session-Id}', \
> @acct_session_time=%{Acct-Session-Time}, \
> @acct_input_packets=%{Acct-Input-Packets}, \
> @acct_output_packets=%{Acct-Output-Packets}, \
> @acct_input_octets=%{Acct-Input-Octets}, \
> @acct_output_octets=%{Acct-Output-Octets}, \
> @acct_terminate_cause='%{Acct-Terminate-Cause}', \
> @user_name='%{User-Name}', \
> @nas_ip_address='%{NAS-IP-Address}', \
> @nas_port=%{NAS-Port}, \
> @nas_port_type='%{NAS-Port-Type}', \
> @service_type='%{Service-Type}', \
> @framed_protocol='%{Framed-Protocol}', \
> @acct_authentic='%{Acct-Authentic}', \
> @acct_delay_time=%{Acct-Delay-Time}, \
> @connect_info='%{Connect-Info}', \
> @called_station_id='%{Called-Staton-Id}', \
> @calling_station_id='%{Calling-Station-Id}', \
> @annex_tx_speed='%{Annex-Transmit-Speed}', \
> @annex_rx_speed='%{Annex-Received-Speed}', \
> @framed_ip_address='%{Framed-IP-Address}'
>
> </Realm>
----------------------------------------
Content-Type: text/html; charset="iso-8859-1"; name="Attachment: 1"
Content-Transfer-Encoding: quoted-printable
Content-Description:
----------------------------------------
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
