Hello Michael -
On Mon, 01 Nov 1999, Michael Jaworski wrote:
> Anyone using Radiator to authenticate with MegaPop?? They just upgraded their
> authentication servers from Merit to Lucent 2.1 and in doing so our users are
> authenticated but can't route out. I noticed in the log files that when some of
> our users are authenticate through our local Portmaster and the associated modem
> pools Radiator returns attributes and when it authenticates MegaPop users it
> does not any attributes other than the proxy-state entry.
>
> #Used by all others
> <Realm DEFAULT>
> RewriteUsername s/^(.*)\/(.*)/$2/
> <AuthBy PLATYPUS>
> DBSource dbi:ODBC:Platypus
> DBUsername platuser
> DBAuth ********
>
> DefaultReply Auth-Type=System,\
> Service-Type = Framed-User,\
> Framed-Protocol = PPP,\
> Framed-IP-Address = 255.255.255.254,\
> Framed-IP-Netmask = 255.255.255.255,\
> Framed-MTU = 1500,\
> Framed-Compression = Van-Jacobson-TCP-IP,\
> Session-Timeout = 28800,\
> Idle-Timeout = 1200
>
> AcctColumnDef data_in,Acct-Input-Octets,integer
> AcctColumnDef data_out,Acct-Output-Octets,integer
> AcctColumnDef ipaddress,Framed-IP-Address
> AcctColumnDef PopPhone,Called-Station-Id
> AcctColumnDef CustomerPhone,Calling-Station-Id
> #AcctColumnDef NASIDENTIFIER,NAS-Identifier
> #AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-Cause
> </AuthBy>
> </Realm>
The problem here is that you are using DefaultReply, which will add attributes
*only* if there are no other attributes present in the packet - and you mention
that you are seeing a Proxy-State in the packets as they go by. You should use
AddToReply, possibly in addition to StripFromReply if there are any attributes
in the packet that you want to get rid of.
See Section 6.14.7 and 6.14.8 in the Radiator 2.14.1 reference manual.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
