So I noticed a doc here for handling empty realms:

https://wiki.geant.org/pages/viewpage.action?pageId=121346324

Are the Handlers executed in order from top to bottom?

---
Roberto Ullfig - [email protected]
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
________________________________
From: radiator <[email protected]> on behalf of Ullfig, 
Roberto Alfredo <[email protected]>
Sent: Tuesday, July 13, 2021 2:07 PM
To: [email protected] <[email protected]>
Subject: [RADIATOR] we're sending empty realms to eduroam tlrs servers

Where would I configure a rejection if the user does not supply a domain name? 
I assume it would be in this section:

<Handler>
        <AuthBy SUSPEND>
XXX
        </AuthBy>
        <AuthBy HASHBALANCE>
XXX
                AuthPort 1812
                AcctPort 1813
                <Host tlrs1.eduroam.us>
                </Host>
                <Host tlrs2.eduroam.us>
                </Host>
        </AuthBy>

I think it would be a bad idea to append our domain if the user doesn't. Or is 
this something that can be configured on the Cisco wireless controllers 
upstream from Radius?

---
Roberto Ullfig - [email protected]
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
_______________________________________________
radiator mailing list
[email protected]
https://lists.open.com.au/mailman/listinfo/radiator

Reply via email to