[isf-wifidog] FirewallRuleSets & User Classes

[Scott Tully]

>        The main blank in this is how the hell are the rule classes
> handled? The Auth server needs to know them but in a system like
> Ile Sans Fil, every hot spot is "independent" and therefore would
> have different user classes for a given user depending on the hot
> spot...

I was thinking of creating a new table in the db called classes with a
shared primary key... something like this

CREATE TABLE `classes` (
 `user_id` varchar(128) NOT NULL default '',
 `node_id` varchar(32) NOT NULL default '',
 `class` int(3) NOT NULL default '3',
 PRIMARY KEY  (`user_id`,`node_id`)
) TYPE=InnoDB;

During authentication instead of selecting the class from the user
table, select the user_id AND node_id from this table for the hotspot
where the login is from... then the user is put in the class assigned
for that hotspot. One login with a different class defined for each
hotspot....

What do ya think? 

Scott