Re: Preventing Dial-ins ?? (fwd)

Pete Holsberg (pjh@mccc.edu)
Fri, 6 Sep 1996 21:09:57 -0400 (EDT)

On Fri, 6 Sep 1996, MegaZone wrote:

> Once upon a time Pete Holsberg shaped the electrons to say...
> >I believe I can do this by dropping the Unix authetication
> >and building a users file on the PM for the users who are
> >permitted to dial in. (The other camp would get Unix
> >accounts that give them Internet access while one campus.)
> >But there are a lot of people who would have both on- and
> >off-campus access, and I'd like to try to avoid creating an
> >PM account and a Unix account for these folks.
>
> Creat entries in the users file for people who CANNOT dialin with bogus
> passwords. A simple one liner will do.
>
> joeblow Password = "Noway"
>
> They'll match this and fail login, other users will get the DEFAULT entry
> and get in as usual.
>
> A lot less work than making entries for all the legit users.

Interesting idea, Meg! I forgot to menthion that I am using
radius modified to accept "loginname.ppp" and "loginname"
as "redirectors" (but I don't think that that will make any
difference.

It would be great if radius would look at the group name.
Is there a hack for that, do you know?

Thanks,
Pete