Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) RADIUS - Blocking multiple logins by same user

-----BEGIN PGP SIGNED MESSAGE-----

On Sat, 9 Aug 1997, RG wrote:

> The TNT has a solution...but have not seen it or know about it.
> 
> I will keep you updated to our progress, and I would appreciate 
> if you do the same.  What kind of setup do you have?

We had the requirement to do this at my old work - we used Cisco 2511s and
TACACS+.

I modified the Cisco-provided code to implement an array in shared-memory,
representing the state of all ports on all access servers in the system
(ie. who was on what port).

Multiple daemons on the same machine all shared the same array - achieving
the "single login" feature. I also wrote a feature that if I sent the
daemon a SIGUSR2, it'd dump a list to a file of everyone on the system (a
quick way to do a "who").

Before I left, I didn't get a multiple-machine solution going, but I was
thinking of having the daemons exchange updates over RPC.

- --
Josh Bailey (mailto:joshb@xtra.co.nz)

Internet Network Specialist                     Voice (DDI): +64-9-355-5923
Telecom Internet Services                       Voice (Mob): +64-25-514-899
Extension: 93423 (Lvl. 4, 120 Mayoral Dve)      Fax:         +64-9-355-5260
Private Bag 92028, Auckland, NZ                 Pager:       +64-26-114-448

PGP public key available at http://www.pgp.net/pgpnet/pks-commands.html

DISCLAIMER: The contents of this message are entirely my own opinion, not
necessarily that of my employer.


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQB1AwUBM+z6u/le+GEe9W4hAQGh/gL+KeILtWRlPcTlmm7cGKteCkJlL9zjnThB
KrUg+O4kJ3qTCJZ9iTaBGU6EYHQvD8/+q7jON83ecip4BIkV06UVxuxqXYZrUfxZ
8HnO9g5aviO6i7R1UZRmHFhV6H2hTzJ4
=RSC3
-----END PGP SIGNATURE-----
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
References: