Feature #4787


Time restrictions on Users, for Captive Portal auth

Added by Criggie . almost 9 years ago. Updated almost 9 years ago.

Needs Patch
User Manager / Privileges
Target version:
Start date:
Due date:
% Done:


Estimated time:
Plus Target Version:
Release Notes:


I'd like to let my kids use the net between certain hours, but deny them after bedtime.

Could the pfSense user manager have a field to select a Time Schedule where the user is allowed to login ?

Time Schedules already exist and are used in firewall rules, this would use the same object definition to control when users can use captive portal.

I understand MS Active Directory has "dialin hours" which would be vaguely similar, however I don't have an AD.

I've tried using a time schedule in a firewall deny rule, but its pretty ugly by comparison. The user simply gets a timeout rather than a useful "denied" error.

Actions #1

Updated by Chris Buechler almost 9 years ago

you can use firewall rules with schedules to accomplish that in some cases. Otherwise you're best off using RADIUS auth, as any RADIUS server supports time/day restrictions.

Actions #2

Updated by Criggie . almost 9 years ago

Confirmed this works as expected. Radius server is relatively complex to set up, I will do a tutorial on it.

Actions #3

Updated by Chris Buechler almost 9 years ago

  • Status changed from New to Needs Patch

I don't see this being something we integrate into the user manager, given those with these requirements often have other more complex requirements where RADIUS is the best option, and the built-in user manager isn't intended to be a replacement for a RADIUS server.


Also available in: Atom PDF