[tac_plus] Re: Redesign? (Was: Different privs for different devices?)

Paul Floyd shadrack at rocketmail.com
Tue Jul 6 15:30:56 UTC 2010


> I think there is no way to  painlessly(*) add further tests and their

> arbitrary combination to the  current syntax.
> I mean: host originating telnet session, NAS tty, actual  weekday and
> daytime, number of already live sessions of the user  etc.
> 
> Authorization clauses are also uneasy.
> 
> *Including backward  compatibility.

OK, but WHY?  Maybe I'm an idiot, but I'm not seeing how the config syntax makes 
this particularly difficult.  Is this something I just need to read the code to 
understand?


      


More information about the tac_plus mailing list