Dear Frederic,
Try the following:
Create a password protected directory in your cgi-bin dir.
Ie. create a .htaccess and a . htpasswd file.
If you don't know how to do this, consult your apache manual.
Then put the radacct script to that protected dir.
When a user tries to access his/her own statistics (s)ne needs to
enter a correct login name and password.
The given login name should be the name s(he) has in your Radiator
database. So you only need to modify /a little/ the SQL statement
/which queries the database/ the match only his/her name.
Try to add at the end: where USERNAME=$ENV{'REMOTE_USER'}
or something similar.
Of course it is a wise thing to switch to a SSL-based webserver, and
restrict your radacct staff to your customers.
SUTO Janos
GTS-Datanet
On Wed, 20 Sep 2000, Frederic Faure wrote:
> Hello again,
>
> Even after a day reading about Apache and CGI, I'm still stuck as to what
> Mike Mc Cauley mean in the header of radacct.cgi. Since no info is
> available in either the Reference manual or the FAQ, I assume I'm not the
> only newbie who is stuck at this point.
>
> 1. If I want a user to only see his own usage accounting infos, I must
> enable the Secure parameter. This requires that the CGI script be saved in
> a "protected directory that requires a username and password to access".
> => What do I need to do in httpd.conf and the user's home directory?
>
> 2. "Configure your web server so that only your customers can run this
> script. You might want to use the Pam Radius module for Apache to
> authenticate them using radius."
> => Does somebody know how to do this?
>
> 3. What do "tags" mean? Are those parameters I must add to the URL, eg.
> http://radius.acme.com?filename=detail&type=sessions_id ?
>
> Thx much for any info
> FF.
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
