RE: Password Expiry. (fwd)

Leo Savage (leo@esva.net)
Thu, 8 Aug 1996 08:40:45 -0400 (EDT)

You said:

> > What I don't understand is why we, the end users have to come up with
> > "hacks" for what is clearly a much needed feature.

Then I said:

> Because there doesn't seem to be anything in PPP for sending a message to
> the operator. There's nothing Livingston can do about it.

Then you said:

> It's not that it needs to communicate to the PPP client. It could send
> mail to a defined e-mail account for each PPP type.

If it's sending email, then it's outside the purview of RADIUS, methinks.
And time-of-logon would be an inappropriate time to do it anyway, which is
when radiusd is checking it.

I think the difference in POV here is that RADIUS is not supposed to be
the whole complete user registration/expiration mechanism. It's just one
tool, one piece of the picture. It's the piece that handles the "this guy
can log on now; that guy can't" function. You still need the rest of the
system, which is going to have to vary for different companies in
different environments.

--
    ("`-/")_.-'"``-._          Leo "doc" Savage
     . . `; -._    )-;-,_`)
    (v_,)'  _  )`-.\  ``-'       leo@esva.net
   _.- _..-_/ / ((.'
 ((,.-'   ((,/             http://www.esva.net/~leo/