Hello Alejandro -
On Wed, 09 Feb 2000, Alejandro Dau wrote:
> > >
> > > <AuthBy RADIUS>
> > > NoForwardAuthentication
> > > NoForwardAccounting
> > > RetryTimeout 2
> > > Retries 2
> > > Host ww.xx.yy.zz
> > > Secret asdf
> > > </AuthBy>
> >
> >This configuration will do nothing -
> >
> >NoForwardAuthentication + NoForwardAccounting = do nothing
> >
> >I don't quite understand the problem....
>
> 'Do nothing' is not what the documentation states; it says that the
> requests will be 'accepted'. Isnt it supposed to allways reply an
> 'Access-Accept' or 'Accounting-Reply' message to the client (ignoring the
> host entry)? Thats the way it worked in the previous version
>
Ahhh - true enough. The new code returns IGNORE, while the old code returned
ACCEPT. The documentation for the new release reflects the change but the
2.14.1 manual still shows the old behaviour. Sorry about that.
>
> PS: We add the NoForwardAuthentication option in our configuration files as
> a quick emergency measure to accept all requests when the relayed server is
> having problems. Probably there are other ways to accept all querys, but we
> need to know if that one is going to work still
The simplest thing to do here is add an AuthBy TEST to your configuration:
<Realm .....>
AuthByPolicy ContinueWhileIgnore
<AuthBy RADIUS>
NoForwardAuthentication
NoForwardAccounting
RetryTimeout 2
Retries 2
Host ww.xx.yy.zz
Secret asdf
</AuthBy>
<AuthBy TEST>
</AuthBy>
</Realm>
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
