Hello Robert -


On your first point, the behaviour of CachePasswords was extended some time ago to support the mode of operation that you are describing - hence the change in the manual.

For your second point, it is usually easier to set up your Handlers with specific matches for everything you want to deal with and finish with a default Handler that simply rejects everything else.

Ie:

<Handler ....>
        .....
</Handler>

<Handler ....>
        .....
</Handler>

.....

<Handler>
        <AuthBy INTERNAL>
                DefaultResult REJECT
        </AuthBy>
</Handler>


regards


Hugh


On Friday, Oct 3, 2003, at 06:19 Australia/Melbourne, Robert Blayzor wrote:


On 10/2/03 1:01 PM, "Robert Blayzor" <[EMAIL PROTECTED]> wrote:

I have a Radiator farm setup which I'm trying to AuthBy ROUNDROBIN to... It
doesn't appear that CachePasswords works for this AuthBy. Looking at my
trace, auths are always sent to the clients and never lookedup in the cache
even though I've authed several times..

I got this one figured out. Helps to consult the manual first, mine was a
little out of date on print. Anyway, changing the default handling of this
was the fix.


I do have one question for Hugh however.

How can one completely drop or reject any request coming in at the client
level based on attributes received (or NOT received for that matter).


For example, say I want to ignore or drop any accounting requests from a
client with the "User-Name" attribute missing, or empty string. I see this
problem a lot on Ascent maxes.


--
Robert Blayzor, BOFH
INOC, LLC
[EMAIL PROTECTED]
PGP: http://www.inoc.net/~dev/
Key fingerprint = A445 7D1E 3D4F A4EF 6875  21BB 1BAA 10FE 5748 CFE9

A Life? Cool! Where can I download one of those from?



===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening?

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to