Readers.conf: help needed (was: my distaste for readers.conf grows)

[Russ Allbery]

Elena Samsonova <E.Samsonova at planetinternet.nl> writes:

> 1) IP authentication: allow unlimited access to the server for anyone
> coming from 123.45.67/19.

> 2) If the person did not come through 1), then have him send you his
> user name and password which you can then catch with another program
> (i.e.  authenticate against Radius or LDAP).

Aidan, could you check me on this?  I'm pretty sure that the following
will do it:

    auth local {
        hosts: 123.45.67.0/19
        default: <LOCAL>
    }

    auth remote {
        auth: "ckpasswd -f /path/to/username/passwd/database"
        default: <FAIL>
    }

    access full {
        users: "*, !<FAIL>"
        newsgroups: *
    }

    access fail {
        users: <FAIL>
        newsgroups: !*
    }

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>