83 lines
2.9 KiB
Plaintext
83 lines
2.9 KiB
Plaintext
# -*- text -*-
|
|
#
|
|
# $Id: 2dad39a25c676821c6e602881e5bec52d738abfd $
|
|
|
|
# counter module:
|
|
# This module takes an attribute (count-attribute).
|
|
# It also takes a key, and creates a counter for each unique
|
|
# key. The count is incremented when accounting packets are
|
|
# received by the server. The value of the increment depends
|
|
# on the attribute type.
|
|
# If the attribute is Acct-Session-Time or of an integer type we add
|
|
# the value of the attribute. If it is anything else we increase the
|
|
# counter by one.
|
|
#
|
|
# The 'reset' parameter defines when the counters are all reset to
|
|
# zero. It can be hourly, daily, weekly, monthly or never.
|
|
#
|
|
# hourly: Reset on 00:00 of every hour
|
|
# daily: Reset on 00:00:00 every day
|
|
# weekly: Reset on 00:00:00 on sunday
|
|
# monthly: Reset on 00:00:00 of the first day of each month
|
|
#
|
|
# It can also be user defined. It should be of the form:
|
|
# num[hdwm] where:
|
|
# h: hours, d: days, w: weeks, m: months
|
|
# If the letter is ommited days will be assumed. In example:
|
|
# reset = 10h (reset every 10 hours)
|
|
# reset = 12 (reset every 12 days)
|
|
#
|
|
#
|
|
# The check-name attribute defines an attribute which will be
|
|
# registered by the counter module and can be used to set the
|
|
# maximum allowed value for the counter after which the user
|
|
# is rejected.
|
|
# Something like:
|
|
#
|
|
# DEFAULT Max-Daily-Session := 36000
|
|
# Fall-Through = 1
|
|
#
|
|
# You should add the counter module in the instantiate
|
|
# section so that it registers check-name before the files
|
|
# module reads the users file.
|
|
#
|
|
# If check-name is set and the user is to be rejected then we
|
|
# send back a Reply-Message and we log a Failure-Message in
|
|
# the radius.log
|
|
#
|
|
# If the count attribute is Acct-Session-Time then on each
|
|
# login we send back the remaining online time as a
|
|
# Session-Timeout attribute ELSE and if the reply-name is
|
|
# set, we send back that attribute. The reply-name attribute
|
|
# MUST be of an integer type.
|
|
#
|
|
# The counter-name can also be used instead of using the check-name
|
|
# like below:
|
|
#
|
|
# DEFAULT Daily-Session-Time > 3600, Auth-Type = Reject
|
|
# Reply-Message = "You've used up more than one hour today"
|
|
#
|
|
# The allowed-servicetype attribute can be used to only take
|
|
# into account specific sessions. For example if a user first
|
|
# logs in through a login menu and then selects ppp there will
|
|
# be two sessions. One for Login-User and one for Framed-User
|
|
# service type. We only need to take into account the second one.
|
|
#
|
|
# The module should be added in the instantiate, authorize and
|
|
# accounting sections. Make sure that in the authorize
|
|
# section it comes after any module which sets the
|
|
# 'check-name' attribute.
|
|
#
|
|
counter daily {
|
|
filename = ${db_dir}/db.daily
|
|
key = User-Name
|
|
count-attribute = Acct-Session-Time
|
|
reset = daily
|
|
counter-name = Daily-Session-Time
|
|
check-name = Max-Daily-Session
|
|
reply-name = Session-Timeout
|
|
allowed-servicetype = Framed-User
|
|
cache-size = 5000
|
|
}
|
|
|