[tac_plus] restrict by time of the day

[Asif Iqbal]

On Mon, Apr 10, 2017 at 4:14 PM, Daniel Schmidt <daniel.schmidt at wyo.gov>
wrote:

> I've considered added it to do_auth before, but this is the first time
> anybody expressed interest.
>


We have a requirement to deny any config change for certain group during
trading hours




>
> On Mon, Apr 10, 2017 at 11:43 AM, Asif Iqbal <vadud3 at gmail.com> wrote:
>
>> On Mon, Apr 10, 2017 at 1:38 PM, heasley <heas at shrubbery.net> wrote:
>>
>> > Sat, Apr 08, 2017 at 06:29:46PM -0400, Asif Iqbal:
>> > > I meant like below per tac_plus.conf man page
>> > >
>> > > cmd-match
>> > >               Specify a command argument match.
>> > >
>> > >                   <permission> <regex>
>> > >                   <permission> <regex>
>> > >
>> > > In the regex may be some expression that become NUL based on
>> timestamp? I
>> > > do not have any example.
>> >
>> > the regex does not match a timestamp; there is in fact no timestamp
>> > involved at all.
>> >
>> > You can use do_auth.py or enforce the ToD via PAM.
>> >
>>
>> I will take a look if it can provide option to allow/deny certain cmd.
>>
>> Thanks
>>
>> > [..]
>>
>>
>>
>> --
>> Asif Iqbal
>> PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
>> A: Because it messes up the order in which people normally read text.
>> Q: Why is top-posting such a bad thing?
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/
>> 20170410/31fb6bb1/attachment.html>
>> _______________________________________________
>> tac_plus mailing list
>> tac_plus at shrubbery.net
>> http://www.shrubbery.net/mailman/listinfo/tac_plus
>>
>
>
>
> E-Mail to and from me, in connection with the transaction
> of public business, is subject to the Wyoming Public Records
> Act and may be disclosed to third parties.
>



-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20170410/9d9c42bd/attachment.html>