Jeremy Kusnetz <[EMAIL PROTECTED]> wrote:
> We are looking to use Login-Time, but I have a few questions about
> timezones.
> 
> Our servers run on GMT, but I would want to setup Login-Times for people in
> different timezones.

  As you noted, that isn't thre right now.

> So for example if I wanted to limit logintimes to only Monday, If I said
> "Mo00:00-23:49" this would be in GMT time.  If I wanted to do this for EST
> time I guess it would be something like "Su19:00-23:59,Mon00:00-19:00".
> This can get pretty ugly.  The Wk wouldn't work any more, I guess instead of
> "Wk00:00-23:59" it would be "Su19:00-23:59,Mo00:00-23:59 ......
> Fr00:00-19:00"
> 
> Is there a maximum to how long this string can be?

  253 characters, I think.

> It would be nice to instead of doing it this way, to do something like
> "Mo-05:00-19:00"  or "Wk05:00-29:00"  In other words just add the timezone
> to the hours you want, and allow negative hours and hours greater then 24.

  Yes, but where does that time zone information come from?  It's not
in the RADIUS request.  So you've got to divide your users into
different time-zone specific groups, which is hard.

> I don't think the current code will support this:

  No, it doesn't.

> I'm not much of a C programmer, but I guess I could give it a shot.  Does
> this sound like something doable?

  How would you allow one user to move?  i.e. They're only allowed in
on Mondays, but if they fly from the U.S. to Japan, they should be
allowed in on Mondays on Japan time, not on U.S. time.


  The only thing I can think of here is to have NAS-specific checks in
the 'users' file, which adds a timezone attribute, depending on where
the NAS is.  The Login-Time attribute checks can then grab the time
zone attribute, and use it to calculate their time.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to