Subject: Re: (radius) Command execution

From: Dave Mitton <[email-masked]>
Date: Mon, 12 Jul 1999 03:34:38 -0400

The Xylogics/////Bay////Nortel Annex///Versalar RAC, implments this 
functionality using several VSAs.

In particular, we have an attribute, Annex-CLI-Filter, which is simply a 
string containing a list of all dis-allowed commands for that user.

We also implement an attribute, Annex-CLI-Command, which is simply an 
single command.  The Access-Accept can contain multiple commands and they 
will be executed in order, before giving the user any control (if at all).

         Dave.

At 04:14 PM 7/8/99 -0700, Indranil Bagchi wrote:

>I am required to enhance the login shell on a switch enabling users to
>execute certain predefined commands. For example if the shell supports
>10 commands, I would like to create user profiles and allow a specific
>user to execute a particular set of commands.
>
>E.g.. User A can execute commands 1,5 and 9.
>      User B can execute commands 3 and 6 etc.
>
>We plan to use a radius server to define such associations and allow/deny
>a particular user for executing a particular command. For example, if
>User B wants to execute any command other than 3 and 6, the radius
>server should deny it.
>
>Are there implementations which support this kind of a feature and how
>can one achieve it in the radius framework.
>
>Thanks
>
>-
>To unsubscribe, email [email-masked]' with
>'unsubscribe ietf-radius' in the body of the message.

---------------------------------------------------------------
David Mitton                             ESN: 248-4570
Consulting Engineer, Nortel Networks     978-288-4570 Direct
Carrier Packet Solutions, IP Services    978-288-3030 FAX
Billerica, MA 01821                  [email-masked]
-
To unsubscribe, email [email-masked]' with
'unsubscribe ietf-radius' in the body of the message.