Thanks Hugh,
I've CC'd to the list for the benefit of others with similar queries.
Basically, this is a new ISP that has been hosting one group of users. We
are now bringing online two more ISPs to be run as virtual branded products.
For reporting and management convenience, it was my intention to split user
authentication and accounting information into different tables for each
realm.
The problem at the moment is that Radmin strips the realm portion of the
username when displaying such pages as current usage. Rather than patch the
script, I was thinking that perhaps just using the realm to point Radiator
to the correct set of database tables would be a tidier way to go. That way,
I wouldn't run into upgrade problems further down the track.
Should the separate Log SQL clauses be placed within the AuthBys? Or outside
the AuthBy but within the Realm clause?
If there is a better way to do this, I'd love to know. This just seemed to
be the most efficient way to be able to keep reporting, etc tidy.
I've also noticed that radwho.cgi will display the username that the user
logged on with, before passing through the rewrite rules. Easy enough to do
rewrites within the CGI script, but something I thought I'd let you know
about.
Cheers,
Gordon
-----Original Message-----
From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 14 December 2000 15:46
To: [EMAIL PROTECTED]; Gordon Smith; Radiator
Subject: Re: (RADIATOR) Radiator and realms
Hello Gordon -
On Tue, 12 Dec 2000, Gordon Smith wrote:
> I have a question regarding realms. Currently, my users log in with
username
> and password. I've set up Radiator to add the default realm. The user
table
> has usernames in the format of user@domain.
OK.
> I'm now adding additional realms to the system. I'd like to be able to
keep
> the users and accounting info separate. Is having separate tables for user
> and accounting info for each realm the correct way to do this?
>
The answer depends on how you wish to administer the user details, but
seperate
tables could well be the prefered way to go.
> I'm assuming that if I set the server up in this way, then the users
tables
> will just have username, rather than username@domain. Currently, the
> username@domain format breaks Radmin, since the realm is stripped off in
the
> report links.
>
Not necessarily - you may still want to keep the username@domain format.
> If I'm right in going to separate tables, should I be specifying handlers
> per realm, or just strip the realm when entering AuthBys?
>
Again this depends on how your business is organised and how you want things
to
work. If you send me a description of your requirements I will be able to
make
some suggestions.
regards
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
