Hi,

aangles <[email protected]> wrote:
> 
> I would Like to know if there is a way to define an expiration time for all
> those users which belong to an LDAP Group, instead of defining this
> attribute for each of those users?
> 
> Moreover, after expiration time , RADIUS send an access-reject to the user.
> Is there any tool or something that send a message to the wifi users  in a
> "windows form"?
> 
I think you have two options, some LDAP xlat'ing after you have called 
your LDAP autz module based around 'control:Ldap-UserDn' or 
alternatively (and probably better) is just to use some unlang to say:
----
if (LDAP-Group == blah) {
        update control {
                Expiration := "<wibble>"
        }
}
----

Then called the 'expiration' module after that.

Cheers

-- 
Alexander Clouter
.sigmonster says: Life is the urge to ecstasy.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to