Re: using radius user file to deny access
Joe Hartley (jh@metheny.brainiac.com)
Thu, 7 Nov 96 16:43:35 EST
> > > PM but still have a valid userid/password in /etc/passwd? I'd like to have
> > > it so that if they tried to dial in they would get some sort of 'access
> > > denied' message.
> >
> > Sure. Put a line like this in users:
> >
> > username Password = "**noaccess**"
>
> That's the idea, until someone figures out that they can use that
> password. Better would be adding "Expiration = Jan 01 1990" or whatever
> the correct syntax is for password expiration. Another option would be to
> set User-Service[-Type] to something illegal like 99.
An excellent suggestion. I've adopted it already. Works just fine!