PPTP VPN 限制一个账号只允许一个用户来登录

创建auth-up文件

1. vi /etc/ppp/auth-up
2. chmod a+x /etc/ppp/auth-up

auth-up脚本内容如下

1. #!/bin/sh
2. # get the username/ppp line number from the parameters
3. REALDEVICE=$1
4. USER=$2
5. # create the directory to keep pid files per user
6. mkdir -p /var/run/pptpd-users
7. # if there is a session already for this user, terminate the old one
8. if [ -f /var/run/pptpd-users/$USER ]; then
9. kill -HUP `cat /var/run/pptpd-users/$USER`
10. rm /var/run/pptpd-users/$USER
11. fi
12. # copy the pid file of current user to /var/run/pptpd-users
13. cp "/var/run/$REALDEVICE.pid" /var/run/pptpd-users/$USER

流程如下：

1.用户登录判断是否有/var/run/pptpd-users/用户名的文件

2.如果有平滑重启这个vpn用户进程,如果没有创建这个文件,文本里面有用户进程ID

3.老的连接被踢掉,新的连接可以使用

备注：这种模式下，一个账号只允许一个用户使用。

重启pptpd

1. service pptpd restart

下边是原文

链接地址：http://poptop.sourceforge.net/dox/skwok/poptop_ads_howto_12.htm#oneconnection

By default, a user can make multiple connections to the pptpd server. To restrict one connection per user, create two script files in the /etc/ppp directory. When the same user logs in twice, the first connection will be disconnected. This is actually done on the ppp level, not with the pptpd.

The first file is /etc/ppp/auth-up

1. #!/bin/sh
2. # get the username/ppp line number from the parameters
3. PPPLINE=$1
4. USER=$2
5. # create the directory to keep pid files per user
6. mkdir -p /var/run/pptpd-users
7. # if there is a session already for this user, terminate the old one
8. if [ -f /var/run/pptpd-users/$USER ]; then
9. kill -HUP `cat /var/run/pptpd-users/$USER`
10. rm /var/run/pptpd-users/$USER
11. fi
12. # write down the username in the ppp line file
13. echo $USER > /var/run/pptpd-users/$PPPLINE.new

The second file is /etc/ppp/ip-up.local

1. #!/bin/sh
2. REALDEVICE=$1
3. # Get the username from the ppp line record file
4. USER=`cat /var/run/pptpd-users/$REALDEVICE.new`
5. # Copy the ppp line pid
6. cp "/var/run/$REALDEVICE.pid" /var/run/pptpd-users/$USER
7. # remove the ppp line record file
8. rm "/var/run/pptpd-users/$REALDEVICE.new"

The method presented here may not be the best one, but it works for me. (If you have a better way, please let me know.)