Hi, aangles <[email protected]> wrote: > > I would Like to know if there is a way to define an expiration time for all > those users which belong to an LDAP Group, instead of defining this > attribute for each of those users? > > Moreover, after expiration time , RADIUS send an access-reject to the user. > Is there any tool or something that send a message to the wifi users in a > "windows form"? > I think you have two options, some LDAP xlat'ing after you have called your LDAP autz module based around 'control:Ldap-UserDn' or alternatively (and probably better) is just to use some unlang to say: ---- if (LDAP-Group == blah) { update control { Expiration := "<wibble>" } } ----
Then called the 'expiration' module after that. Cheers -- Alexander Clouter .sigmonster says: Life is the urge to ecstasy. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

