On Wed, 28 Aug 1996, C. M. Rahman (jr) <pappu@ccsi.com> wrote:
> It seems, some of my users is able to login to the terminal server even
> though there account has been expired in the radius table. The radius server
> is running on the Solaris 2.4 box. Anybody know the correct format the user
> table should be. Or anybody know the cause of this problem ?
i ran into this same problem when we started expiring accounts in radius
(rather than manually commenting their entries out that afternoon.) we found,
among other things, that the format of how the date is written is very
specific... {thinks back... hmmm...}
basically, the month has to have the first letter capitalized and the others
in lower case, then a single SPACE character, then TWO DIGITS for the day of
the month (start with a 0 if the day is less than 10,) then another single
SPACE character, then the year FOUR DIGITS.
the expiration clause comes after the password clause, on the same line,
separated with a comma... and no comma at the end of the line.
as an example, this is a "template" we keep in our users file, commented out
but with easily copy-and-paste-able with pico or vi... it shows the proper
format for the date. also pay attention to which lines have commas at the end
and which ones don't.
hagbard Password = "C3L1N3", Expiration = "Sep 05 1996"
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-Address = 255.255.255.254,
Framed-Netmask = 255.255.255.255,
Framed-Compression = Van-Jacobsen-TCP-IP,
Framed-MTU = 1500
hope this helps. take care all.
-john
-------------------------------------------------------------------------------
John Simpson, Software Engineering | The Internet Access Group, Inc.
http://www.depeche.mode.net/~jms1/ | PO Box 162625
Personal: <jms1@depeche.mode.net> | Altamonte Springs, FL 32716-2625
Business: <jms1@iag.net> | (407) 786-1145
-------------------------------------------------------------------------------