rlm_sradutmp
Synopsis
The sradutmp module provides a "safe" version of the
radutmp module, where the sradutmp file can be
globally readable.
Processing Sections
Any.
Processing Sections
accounting
When listed in the accounting section, the sradutmp module updates the sradutmp file.
- Return codes
-
noopThe module did nothing. The input packet did not contain the information required by thesradutmpfile. -
failThe module was unable to expand thefilenameor to open the file. -
okThe module successfully wrote the user’s login record to the file.
checksimul
When listed in the checksimul section, the sradutmp module checks
the sradutmp file to see if the user has already logged in.
- Return codes
-
failThe module was unable to expand thefilenameor to open the file. -
okThe user is allowed to log in. -
noopTheusernamedirective was empty.
Expansions
None.
Directives
- Syntax
-
callerid = boolean
- Default
-
no
- Description
-
If set, the
Calling-Station-Idwill be stored in the user’s record.
- Syntax
-
case_sensitive = boolean
- Default
-
yes
- Description
-
Treat the user’s login name as case sensitive. If set to
no, then the stringsName,NaMe,NAME, andnameare all identical. -
It is not recommended to set this directive to
no.
- Syntax
-
check_with_nas = boolean
- Default
-
yes
- Description
-
The server normally runs
checkradwhen it determines that the user is trying to login multiple times. Thecheckradscript asks the NAS about the previous login sessions, as an accounting "stop" packet might have been lost. -
When this directive is set to
no, the server will not runcheckradand will treat the contents ofsradumptas being definitive.
- Syntax
-
filename = string
- Default
-
${logdir}/sradutmp
- Description
-
The name of the
sradutmpfile. This file should not be rotated.
- Syntax
-
perm = integer
- Default
-
0644
- Description
-
The Unix-style permissions for the log file.
-
The
sradutmpfile contains private information about users. It is recommended to keep the file permissions as restrictive as possible.
- Syntax
-
username = string
- Default
-
%{User-Name}
- Description
-
The field in the
requestthat is used as the key for thesradutmpentries.
|
Note
|
The size of the field in the utmp data structure is small,
usually around 32 characters. A better key may be
%\{Stripped-User-Name:-%{User-Name}}
|