Hello Antonio -
On Thu, 11 Nov 1999, Antonio Navarro Navarro wrote:
> Hi all.
>
> I have a Linux RedHat 6.1 with Radiator (latest version) + users and accounting in a
>MySQL Server.
>
> The configuration file of radiator follows (realm DEFAULT section only):
>
> <Realm DEFAULT>
> AcctLogFileName /var/log/radiator.log
> MaxSessions 1
> <AuthBy SQL>
> DBSource dbi:mysql:radius
> DBUsername xxxxxxxxxxx
> DBAuth xxxxxxxxxxxxx
> AccountingTable ACCOUNTING
> AccountingStopsOnly
> AcctColumnDef USERNAME,User-Name
> AcctColumnDef TIME_STAMP,Timestamp,integer
> AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
> AcctColumnDef ACCTDELAYTIME,Acct-Delay-Time,integer
> AcctColumnDef ACCTINPUTOCTETS,Acct-Input-Octets,integer
> AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
> AcctColumnDef ACCTSESSIONID,Acct-Session-Id
> AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer
> AcctColumnDef ACCTTERMINATECAUSE,Acct_Terminate-Cause
> AcctColumnDef NASIDENTIFIER,NAS-Identifier
> AcctColumnDef NASPORT,NAS-Port,integer
> AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address
> AuthSelect select PASSWORD, CHECKATTR, REPLYATTR from
SUBSCRIBERS where USERNAME='%n'
> </AuthBy SQL>
> </Realm>
>
> In the subscribers table I have registries like this:
>
> USERNAME: usuario@bemarnet
> PASSWORD: xxxxxxxxx
> REPLYATTR: Service-Type = Framed-User
>
Note that you can configure Radiator with Realms or Handlers to key on username
suffixes of the form usuario@bemarnet:
<Realm bemarnet>
or
<Handler Realm = bemarnet>
And you can rewrite usernames to remove the suffixes as well.
This can be very useful in some cases.
> I need several things:
>
> 1.- I have 256 IP addresses for my network, but want to define a 64 IPs
pool from x.x.x.1 to x.x.x.64 in order to assign only this addresses to my
users. How can this be done ? >
This depends on whether you want to do this in your NAS or in Radiator, either
way you will need to define a pool. This shouldn't be a problem.
> 2.- I want to assign fixed IP addresses starting from x.x.x.65 for several users.
Is this compatible with the 64 IPs pool ?
>
Sure. As long as all of this is in the same network, it should be fine. You
will just end up with a bunch of host routes inside your network and you can
aggregrate them at your exit point (upstream ISP).
> 3.- I have three kind of users: ISDN, Async and mixed (
users that can use ISDN and Async with the same username). How can I restrict
ISDN connections for certain users ? I want user A to be accepted only if
connected with modem (Async), B only if connected with ISDN and C accepted in
any case. > > Thanks in advance !! >
>
Again, this can be done either with Handlers, or with user definitions, and it
will depend on what the NAS sends in its Access-Request to indicate what type
of connection is being requested. You will probably have to do some experiments
to find out what is going to work best.
If you send me more detailled information I'll be happy to help.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
