Hello Mariano -
You will have to try these things out to verify whether they work or
not.
As far as I can see the idea should work, however I don't think what
you show below will work as you expect, because the AddToReply will be
done *after* the AuthBy clause is executed. I suppose you could use an
AuthBy INTERNAL clause before the other AuthBy clause to add the fake
attributes, but as I have said previously this seems very unnatural to
me (just my own view).
regards
Hugh
On Thursday, September 19, 2002, at 12:31 AM, Mariano Absatz wrote:
> Hi Hugh,
>
> I'd like to recap and see if this thing I did after your suggestions
> would
> work:
>
> ################### radius.cfg START #####################
> <AuthBy LOADBALANCE>
> Identifier ProxyStandard
> NoDefault
> # Para cada "Faked-Attribute" que se setea en los <Handler>
> # se deberan crear archivos ParamXXX y HostsXXX en el directorio
> # /usr/local/radiator/etc
> include %D/Param%{Reply:Faked-Attribute}.cfg
> include %D/Hosts%{Reply:Faked-Attribute}.cfg
>
> AcctFailedLogFileName \
> %L/ACCT-LOST/%{Reply:Faked-Attribute}/%Y-%m-%d.log
>
> StripFromReply Faked-Attribute
> </AuthBy>
>
>
> # Kind01 Handler
> <Handler Called-Station-Id=/2222$|^123456$/>
> Identifier Handler01
> RewriteUsername s/^([^@]+).*/$1/
> AddToReply Faked-Attribute="Kind01"
> AuthBy ProxyStandard
> </Handler>
>
> # Kind02 Handler
> <Handler Called-Station-Id=/4444$|^654321$/>
> Identifier Handler02
> RewriteUsername s/^([^@]+).*/$1/
> AddToReply Faked-Attribute="Kind02"
> AuthBy ProxyStandard
> </Handler>
>
> # Kind03
> <Handler Realm=/^whatever.com$/>
> Identifier Handler03
> AddToReply Pert-Service-Code="Kind03"
> AuthBy ProxyStandard
> </Handler>
>
> #################### radius.cfg END ######################
>
> The idea is that I have separate files for specific parameters, for
> instance:
>
> ################### ParamKind01.cfg START #####################
> SessionDatabase ProxySession
> AcctLogFileName %L/Accounting%{Reply:Faked-Attribute}.log
>
> <AuthLog FILE>
> FileName %L/Auth%{Reply:Faked-Attribute}.log
> LogSuccess 1
> LogFailure 1
> SuccessFormat %l:POST:%U:%N:OK-%{Reply:Code}:%{Handler:Identifier}
> FailureFormat %l:POST:%U:%N:FAIL-%{Reply:Code}:%{Handler:Identifier}
> </AuthLog>
> #################### ParamKind01.cfg END ######################
>
> ################### HostsKind01.cfg START #####################
> <Host 1.2.3.4>
> AuthPort 1645
> AcctPort 1646
> Secret xxxx
> RetryTimeout 1
> Retries 0
> </Host>
> <Host 1.2.3.4>
> AuthPort 1812
> AcctPort 1813
> Secret xxxx
> RetryTimeout 1
> Retries 0
> </Host>
> <Host 1.2.3.5>
> AuthPort 1645
> AcctPort 1646
> Secret xxxx
> RetryTimeout 3
> Retries 0
> </Host>
> <Host 1.2.3.5>
> AuthPort 1812
> AcctPort 1813
> Secret xxxx
> RetryTimeout 3
> Retries 0
> </Host>
>
> #################### HostsKind01.cfg END ######################
>
> Supposedly, HostsParam02.cfg may have different settings and
> HostsKind02.cfg
> will have a different set of hosts.
>
> And so on...
>
> Will this kind of dynamic stuff work? Or can you think of another way
> to do
> it?
>
> TIA
>
>
> --
> Mariano Absatz
> El Baby
> ----------------------------------------------------------
> Late one night in the middle of the day, two dead
> soldiers got up to fight. Back to back they faced
> each other, pulled out their swords and shot one
> another. A deaf policeman heard the noise, got up
> and shot the twice dead boys. If you don't believe
> me, ask the blind man who saw it all, through a
> knothole in a wooden brick wall.
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
>
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
