| /CHANGELOG |
|---|
| 16,6 → 16,7 |
| CHANGES |
| - Save SMS status and number in ALCASAR configuration file (persistent to updates). |
| - Launch Gammu at startup when the SMS service is enabled and check Gammu status in alcasar-daemon. |
| - Print a dedicated error message for each connection error. |
| BUGS |
| - vnstat : bug when updating version. |
| /alcasar.sh |
|---|
| 966,7 → 966,7 |
| chown -R radius:radius /etc/raddb/mods-available/ldap-alcasar |
| # Set only usefull modules for ALCASAR (ldap is enabled only via ACC) |
| rm -rf /etc/raddb/mods-enabled/* |
| for mods in sql sqlcounter attr_filter expiration logintime pap expr |
| for mods in sql sqlcounter attr_filter expiration logintime pap expr always |
| do |
| ln -s /etc/raddb/mods-available/$mods /etc/raddb/mods-enabled/$mods |
| done |
| /conf/radius/alcasar |
|---|
| 20,23 → 20,76 |
| } |
| authorize { |
| sql{ |
| sql { |
| notfound = 1 |
| reject = 2 |
| } |
| if(notfound){ |
| if (notfound) { |
| update reply { |
| Reply-Message := "Username not found" |
| } |
| reject |
| } |
| expire_on_login |
| noresetcounter |
| dailycounter |
| monthlycounter |
| expiration |
| counterCoovaChilliMaxTotalOctetsDaily |
| counterCoovaChilliMaxTotalOctetsMonthly |
| logintime |
| expire_on_login { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your usage time has been reached" |
| } |
| reject |
| } |
| noresetcounter { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum usage time has been reached" |
| } |
| reject |
| } |
| monthlycounter { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum monthly usage time has been reached" |
| } |
| reject |
| } |
| dailycounter { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum daily usage time has been reached" |
| } |
| reject |
| } |
| counterCoovaChilliMaxTotalOctetsMonthly { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum monthly usage volume has been reached" |
| } |
| reject |
| } |
| counterCoovaChilliMaxTotalOctetsDaily { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum daily usage volume has been reached" |
| } |
| reject |
| } |
| expiration { userlock = 1 } |
| if (userlock) { |
| update reply { |
| Reply-Message := "Your expiration date has been reached" |
| } |
| userlock |
| } |
| logintime { userlock = 1 } |
| if (userlock) { |
| update reply { |
| Reply-Message := "Your are out your allowed time period" |
| } |
| userlock |
| } |
| pap |
| } |
| 56,6 → 109,9 |
| post-auth { |
| Post-Auth-Type REJECT { |
| update reply { |
| Reply-Message = "Login failed" |
| } |
| attr_filter.access_reject |
| } |
| } |
| /conf/radius/alcasar-with-ldap |
|---|
| 20,16 → 20,78 |
| } |
| authorize { |
| sql |
| expire_on_login |
| noresetcounter |
| dailycounter |
| monthlycounter |
| expiration |
| counterCoovaChilliMaxTotalOctetsDaily |
| counterCoovaChilliMaxTotalOctetsMonthly |
| logintime |
| sql { |
| notfound = 1 |
| } |
| if (notfound) { |
| update reply { |
| Reply-Message := "Username not found" |
| } |
| reject |
| } |
| expire_on_login { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your usage time has been reached" |
| } |
| reject |
| } |
| noresetcounter { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum usage time has been reached" |
| } |
| reject |
| } |
| monthlycounter { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum monthly usage time has been reached" |
| } |
| reject |
| } |
| dailycounter { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum daily usage time has been reached" |
| } |
| reject |
| } |
| counterCoovaChilliMaxTotalOctetsMonthly { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum monthly usage volume has been reached" |
| } |
| reject |
| } |
| counterCoovaChilliMaxTotalOctetsDaily { reject = 1 } |
| if (reject) { |
| update reply { |
| Reply-Message := "Your maximum daily usage volume has been reached" |
| } |
| reject |
| } |
| expiration { userlock = 1 } |
| if (userlock) { |
| update reply { |
| Reply-Message := "Your expiration date has been reached" |
| } |
| userlock |
| } |
| logintime { userlock = 1 } |
| if (userlock) { |
| update reply { |
| Reply-Message := "Your are out your allowed time period" |
| } |
| userlock |
| } |
| pap |
| ldap { |
| fail = 1 |
| } |
| 59,6 → 121,9 |
| post-auth { |
| Post-Auth-Type REJECT { |
| update reply { |
| Reply-Message = "Login failed" |
| } |
| attr_filter.access_reject |
| } |
| } |