Hugh/Anyone - 

Here's our config (the relevant section):
----------------------

    <Handler>
        SessionDatabase SDBrealm

        <AuthBy GROUP>
            AuthByPolicy ContinueWhileAccept

            <AuthBy RADIUS>
                Host            xxxx
                Secret           xxxx

                # listen port for Netserver
                AuthPort         11812
                AcctPort        11813

                Retries         2
                RetryTimeout    15

                # Strip the ip addresses supplied by remote radius server
                ReplyHook file:"%D/neworcon/hook-ipass-reply.pl"
        
            </AuthBy>


            # now that we're authenticated, assign an IP address
            <AuthBy DYNADDRESS>

                Allocator OurAllocator
                PoolHint premium
                
                StripFromReply    PoolHint, Framed-IP-Netmask

            </AuthBy>
            
        </AuthBy>
        
    </Handler>

----------------------

Basically what we're after is to authenticate to iPass, then add an address
from our AddressAllocator to the config. But whenever I try doing this, the
AuthGROUP gets called - which then calls the AuthRadius, and the hook cleans
up any bogus static addresses which (may) be supplied.  But the second
AuthGroup parameter - AuthDYNADDRESS doesn't seem to be called at all.  Thus
all that gets returned to the NAS is

    Service-Type=Framed-User, Framed-Protocol=PPP.

No ip address.  

If I take the AuthGroup out -- it processes the iPass hook, then immediately
replies with an Access-Accept and an IP address, then when the iPass reply
comes back it returns Service-Type.., Framed-Protocol... (again with no
Framed-IP).

Any ideas (without resorting to Synchronous and Fork)?

- Is there a way to execute and AuthBy section from a perl hook (ie. in the
ReplyHook) - thereby calling Authby DYNADDRESS directly?

.........................................................................

Mark Mackay,
Network Coordinator,
Orcon Internet.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to