----------  Forwarded Message  ----------
Subject: AuthFILE modification to do a realm-less lookup in the file
Date: Tue, 4 Jul 2000 12:00:49 +0930
From: Simon Hackett <[EMAIL PROTECTED]>


Hi,

We've modified AuthFILE.pm to teach it a new keyword, 'StripRealm', 
for use inside <AuthBy FILE> statements.

What this does is tells AuthFILE to look for usernames in the user 
file specified after removing the rightmost realm from the incoming 
username.

The reason we don't use RewriteUsername to do this (i.e. strip the 
realm off before matching in the users file) is because that results 
in the realm-less entry appearing in the ultimate accounting file 
entries.

We want to retain the realm in the accounting detail file (because it 
unambiguously distinguishes the accounting record from those 
generated by processing other customer realms), and we couldn't find 
a way to preserve the full realm name and also match on 'realm-less' 
entries in the user file accessed by AuthBy FILE.

The question is: is there some other way to get AuthFILE to match 
'realmless' usernames in the users file, without the above-noted side 
effect of RewriteUsername?

If not, maybe we've invented something useful, in which case I'd be 
happy to contribute it back to Open System to bundle into future 
distributions - it works well for us.

Regards,
   Simon Hackett


---
Simon Hackett, Technical Director, Internode Systems Pty Ltd
31 York St [PO Box 284, Rundle Mall], Adelaide, SA 5000 Australia
Email: [EMAIL PROTECTED]  Web: http://www.on.net
Phone: +61-8-8223-2999          Fax: +61-8-8223-1777
-------------------------------------------------------

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to