[tac_plus] Re: Redesign? (Was: Different privs for different devices?)

Paul Floyd shadrack at rocketmail.com
Wed Jul 7 19:44:09 UTC 2010





----- Original Message ----
> From: Kiss Gabor (Bitman) <kissg at ssg.ki.iif.hu>
> Cc: tac_plus at shrubbery.net
> Sent: Tue, July 6, 2010 10:27:53 PM
> Subject: [tac_plus] Re: Redesign? (Was: Different privs for different 
devices?)
> 
> > > I think there is no way to  painlessly(*) add further tests and  their
> > 
> > > arbitrary combination to the  current  syntax.
> > > I mean: host originating telnet session, NAS tty,  actual  weekday and
> > > daytime, number of already live sessions  of the user  etc.
> 
> > OK, but WHY?  Maybe I'm an idiot, but  I'm not seeing how the config syntax 
>makes 
>
> > this particularly  difficult.  Is this something I just need to read the code 
>to 
>
> >  understand?
> 
> Why don't you show us some example configs?  :-)

group = my_group {
    acl = my_acl
    tty = vty[0-4]
    time_of_day = Mon-Fri,8a-9p
    max_sessions = 2
}

user = fred {
   member = my_group
}


      


More information about the tac_plus mailing list