Hello Dave -

The way to do this is with AuthBy GROUP(s):

# configure AuthBy clause

<AuthBy LDAP>
        Identifier CheckLDAP
        .....
</AuthBy>

# configure AuthBy GROUP

<AuthBy GROUP>
        Identifier CheckUsers
        RewriteUsername
        AuthBy CheckLDAP
</AuthBy>

# configure Realms or Handlers

<Realm ....>
        AuthBy CheckUsers
        ....
</Realm>

See section 6.21 in the Radiator 2.18 reference manual.

cheers

Hugh


At 16:56 -0500 01/3/27, Kitabjian, Dave wrote:
>Subject says it all.
>
>The docs say you can specify RewriteUsername Globally, in Client clauses,
>and in Realms. (It might be worth mentioning that it appears to work in
>non-realm Handlers, too.)
>
>But anyway...
>
>I'm wondering if it can work in <AuthBy> clauses?
>
>The reason we'd like that is as follows. We do a RewriteUsername to strip
>out garbled characters before passing requests onto LDAP, since it will hang
>LDAP (and sometimes Radiator :-( ). We don't know which Clients will end up
>using the AuthBy LDAP, and the requests may arrive via other Handlers, too.
>So the logical place to put it is in the AuthBy. Otherwise, we'll have to
>make sure to specify it in each Handler, which is less than elegant.
>
>Does this make sense?
>
>Thanks!
>
>Dave
>NetCarrier
>
>
>===
>Archive at http://www.starport.net/~radiator/
>Announcements on [EMAIL PROTECTED]
>To unsubscribe, email '[EMAIL PROTECTED]' with
>'unsubscribe radiator' in the body of the message.

-- 

NB: I am travelling this week, so there may be delays in our correspondence.

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to