Hello Simon -
On Tue, 04 Jul 2000, Simon Hackett wrote:
> Hi,
>
> We've modified AuthFILE.pm to teach it a new keyword, 'StripRealm',
> for use inside <AuthBy FILE> statements.
>
> What this does is tells AuthFILE to look for usernames in the user
> file specified after removing the rightmost realm from the incoming
> username.
>
> The reason we don't use RewriteUsername to do this (i.e. strip the
> realm off before matching in the users file) is because that results
> in the realm-less entry appearing in the ultimate accounting file
> entries.
>
> We want to retain the realm in the accounting detail file (because it
> unambiguously distinguishes the accounting record from those
> generated by processing other customer realms), and we couldn't find
> a way to preserve the full realm name and also match on 'realm-less'
> entries in the user file accessed by AuthBy FILE.
>
> The question is: is there some other way to get AuthFILE to match
> 'realmless' usernames in the users file, without the above-noted side
> effect of RewriteUsername?
>
> If not, maybe we've invented something useful, in which case I'd be
> happy to contribute it back to Open System to bundle into future
> distributions - it works well for us.
>
An alternative is to use Handlers, and deal with the accounting as a seperate
issue:
<Handler Request-Type = Accounting-Request>
.....
</Handler>
<Handler .....>
......
</Handler>
<Handler>
.....
</Handler>
I've copied Mike on this mail and he can decide about StripRealm.
regards
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
