[tac_plus] Re: Redesign? (Was: Different privs for different devices?)
Paul Floyd
shadrack at rocketmail.com
Tue Jul 6 15:30:56 UTC 2010
> I think there is no way to painlessly(*) add further tests and their
> arbitrary combination to the current syntax.
> I mean: host originating telnet session, NAS tty, actual weekday and
> daytime, number of already live sessions of the user etc.
>
> Authorization clauses are also uneasy.
>
> *Including backward compatibility.
OK, but WHY? Maybe I'm an idiot, but I'm not seeing how the config syntax makes
this particularly difficult. Is this something I just need to read the code to
understand?
More information about the tac_plus
mailing list