Hello Christian -
I think you should consider using cascaded AuthBy clauses, with an AuthBy FILE
with DEFAULT entries as the first AuthBy which then calls the AuthBy LDAP(s).
Then you could have both NAS types handled correctly:
# users file with DEFAULT entries
DEFAULT Password = ascend, Auth-Type = ....
.......
DEFAULT Password = cisco, Auth-Type = ....
.....
DEFAULT Auth-Type = ......
.....
You could also use the Suffix check item if neccessary.
hth
Hugh
On Tue, 05 Sep 2000, Christian Hammers wrote:
> Hello
>
> I have a difficult problem. To enable callback via Radius+LDAP I have to
> store a username-out record next to the username record in the users
> database. This -out gets requested whenever the router tries to reach the
> IP which must be dialed by callback. So far no problems.
>
> But we have an ascend and a cisco, both trying to fetch this -out
> profile with the standard passwords "ascend" and "cisco".
>
> How can I tell the radiator that every request with
> User-Name = xxx-out
> Service-Type = Outbound-User
> should be accepted when the password is ascend or cisco depending on the
> identifier vairable?
>
>
> I thought of an PreAuthHook that replaces the Passwords with a third
> choosen default password which is then the one that's stored in LDAP
> but I don't know how to replace a Password as it seems to be crypted
> in some way.
>
> Any ideas?
>
> bye,
>
> -christian-
>
> --
> Christian Hammers WESTEND GmbH - Aachen und Dueren Tel 0241/701333-0
> [EMAIL PROTECTED] Internet & Security for Professionals Fax 0241/911879
> WESTEND ist CISCO Systems Partner - Premium Certified
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
