next up previous
Next: common authorization axamples Up: authorization Previous: authorization information

tacppd authorization data modifyers

for better AV handling we have system of AV modifyers. The modifyers - interface to internal functions, SQL servers and external programs to change values during request

- Internal functions: set AVP as - attribute=INT:function the function currently available - addrpool=number this is request to internal address pooling system Example: "addr=INT:addrpool=10" (get address from address pool number 10) for setting address pools see config file documentation

- SQL functions: attribute=SQL:sql function request string request to SQL for data. Get only first row value Example: "timeout=SQL:GetTimeoutFunction($name)" it will requested as "SELECT GetTimeoutFunction(PppUserName)" (this is example for PostgreSQL, for Oracle it will be some differ), if i not mistake: "SELECT GetTimeoutFunction(PppUserName) FROM DUAL" (see Oracle documentation about calling PL/SQL functions) (you will need in this information only if you will create your own database driver)

External program: attribute=EXT:external program request string Example: "timeout=EXT:get_timeout.pl" or "timeout=EXT:get.pl $name" NOTE: see BUGS file for status of bug 20010716 (currently this feature doesn't work) The programs can be placed ONLY into "ext" subdirectory in tacppd tree.

For sending information to external requests you can use additional variables: $name - during this request this will be changed to current username string $port - nas port name $nas - network access server $phone - phone string if it is dialup connection

Example: "timeout=SQL:time_table_function('$name','$nas','$phone')"

!NOTE! - external program modifyer very buggy and don't usable while


next up previous
Next: common authorization axamples Up: authorization Previous: authorization information
2005-07-21