Re: denying users in bulk

Hello, Kelly 
Great Thanks for your suggestions and confirmations!! :=))
Take Care,
Fabiano

Petrone Fabiano
Università degli Studi di Udine
Direzione Servizi Operativi – Gestionali d’Ateneo / Area biblioteche
tel. +39-432-556256
skype petrone.fabiano
________________________________________
From: Vickery, Kelly M. [[email protected]]
Sent: Tuesday, October 1, 2019 19:15
To: Fabiano Petrone; [email protected]
Subject: RE: denying users in bulk

Hello Fabiano,

We have done this in the past.  There was a time when we had a deny list of over 10000 specific administrative and service accounts which I needed to block after discover a couple of them had been used to harvest information.  It isn't the best way to function, but it can be done, exactly as you described it, and it will deny the accounts access.   While checking such a sizable list must slow things down, for us, it was not really a noticeable degradation in Ezproxy performance.  If you need to do this, then it should work.

Kelly M. Vickery
Director of Library Information Technology
William T. Young Library
University of Kentucky
Lexington, KY 40506-0456
phone: (859) 218-1425
fax: (859) 257-0505
email: [email protected]


-----Original Message-----
From: EZproxy List <[email protected]> On Behalf Of Fabiano Petrone
Sent: Monday, September 30, 2019 6:12 AM
To: [email protected]
Subject: [EZPROXY-L] denying users in bulk

Hello, Dear List
Our EZproxy successfully authenticates our users via radius.
sadly I've discovered that inside the database are still -for admin purposes-  some graduates.
As a quick fix, I've thought I can extract their usernames and put them in a single file (say denied.txt)  with the "Deny" action for each of them.
Then I can add the following line on my radius conf in user.txt:

::radius=MY_RADIUS_IP,secret=MY_SECRET
::file=denied.txt

is this idea OK in your opinion?
if yes, how many users can I add on denied.txt?

is there an alternative to my idea for this kind of problem?

Thanks a lot in advance for your reply,

Fabiano


Petrone Fabiano
Università degli Studi di Udine
Direzione Servizi Operativi - Gestionali d'Ateneo / Area biblioteche tel. +39-432-556256 skype petrone.fabiano
********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences, you can do so <a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.oclc.org%2Fforms%2Finternet-subscription.en.html&amp;data=02%7C01%7Ckelly.vickery%40uky.edu%7C4984685fa2fd4bdd55c108d745910d48%7C2b30530b69b64457b818481cb53d42ae%7C0%7C1%7C637054361618980412&amp;sdata=bzAv70IpUcuqALgO8PY4Aqvaa8bgZDElvB3XuaYdLrA%3D&amp;reserved=0">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
. To unsubscribe: "unsubscribe EZPROXY-L"
. To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
. To set your options to no mail: "set EZPROXY-L nomail"
. To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications (including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters), please email us at [email protected].

********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences,
you can do so <a href="https://www.oclc.org/forms/internet-subscription.en.html">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
• To unsubscribe: "unsubscribe EZPROXY-L"
• To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
• To set your options to no mail: "set EZPROXY-L nomail"
• To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters),
please email us at [email protected].