(RADIATOR) Multiple Calling-Station-Id

2002-08-14 Thread Ayotunde Itayemi
Hi All, I have a similar problem to Micheal's (see inquiry) If my understanding is correct, that user cannot connect under any circumstance to any other NAS on the network? I require a little more flexibility in that the user should ONLY be restricted to a particular NAS if he uses a

(RADIATOR) Re: Multiple Calling-Station-Id

2002-08-14 Thread Hugh Irvine
Hello Tunde - For your second point, you would do something like this: # define Clients with Identifiers Client 1.2.3.4> Identifier PoolTag /Client> . # define AuthBy DYNADDRESS AuthBy DYNADDRESS> Identifier AllocateIPAddress PoolHint %{Client:Identifier} . /AuthBy>

(RADIATOR) Logging incorrect passwords with Authlog SQL

2002-08-14 Thread Nicolai van der Smagt
Hello, Recently I moved our authentication logging to Authlog SQL. In the old setup we had a PasswordLogFileName %L/ clause. When a user tried logging in with a bad password, the password that the user used was logged to the password logfile. This was nice because our users cannot change the

(RADIATOR) Radiator AS a Proxy?

2002-08-14 Thread Skeeve Stevens
Is it possible to use Radiator as a Proxy Radius? We have a customer who wants to be able to authenticate their own dialup users... so they can keep control of the passwords. I am not completely against this, but would like to let them only authenticate users that we have approved

RE: (RADIATOR) Expiration

2002-08-14 Thread Dave Kitabjian
Title: Message Well, in MS Sql Server you should be able to do something like: update USERS set EXPIRATION=DATEADD(mm, 3, '%Y-%m-%d') where . I don't use SQL with Radiator, so I'm assuming that Radiator will parse hte %Y stuff before passing it along to the

Re: (RADIATOR) Radiator AS a Proxy?

2002-08-14 Thread jlewis
On Wed, 14 Aug 2002, Skeeve Stevens wrote: Is it possible to use Radiator as a Proxy Radius? We have a customer who wants to be able to authenticate their own dialup users... so they can keep control of the passwords. I am not completely against this, but would like to let them

FW: [020814-0034] (RADIATOR) Radiator AS a Proxy?

2002-08-14 Thread Skeeve Stevens
gr. ...Skeeve -Original Message- From: Support Services [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 14, 2002 11:01 PM To: Skeeve Stevens Subject: [020814-0034] (RADIATOR) Radiator AS a Proxy? This is an automated response. We have received your support email. A

RE: (RADIATOR) Radiator AS a Proxy?

2002-08-14 Thread Frank Danielson
You could set up an AuthBy RADIUS clause to point to your customer's RADIUS server and then add and Auth-Type check item to those users in you users file to database to force them to authenticate using the AuthBy RADIUS. In the 2.19 manual section 13.1.6 explains the use of the Auth-Type check

(RADIATOR) enable mode on cisco equipment

2002-08-14 Thread Francisco Arache
hi all, I've been trying to configure radiator to give access to a cisco equipment and log the user in the enable mode inmediatly, but no result. I'm using standard dictionary,and also i also have cisco-avpair="shell-priv-lvl=15" defined in the user attributes. Also i defined in the

Re: (RADIATOR) enable mode on cisco equipment

2002-08-14 Thread Hugh Irvine
Hello Francisco - I will need to see a copy of your configuration file (no secrets), together with a trace 4 debug from Radiator and a copy of your users file to be able to see what is going on. Something like this in your users file should work though: # users file entry for cisco login #

Re: (RADIATOR) Radiator AS a Proxy?

2002-08-14 Thread Hugh Irvine
Hello Skeve, Hello Frank - Frank is correct (thanks Frank) - you would do something like this: # define AuthBy clauses AuthBy RADIUS Identifier ForwardToProxy Host . Secret . AllowInReply . . /AuthBy AuthBy FILE Identifier

Re: (RADIATOR) Logging incorrect passwords with Authlog SQL

2002-08-14 Thread Hugh Irvine
Hello Nicolai - Yes, you can use the %P special character to give you the decoded password in the SuccessQuery and/or FailureQuery (you may need to upgrade however - Radiator 3.1 is the latest release - and there are also some patches). regards Hugh On Wednesday, August 14, 2002, at

(RADIATOR) Re: Multiple Calling-Station-Id

2002-08-14 Thread Ayotunde Itayemi
Hi Hugh, I assume I can have multiple PoolHint %{Client:Identifier} in a single AuthBy DYNADDRESS clause? Secondly, how do I restrict the special NAS to ONLY answer requests from clients with the mobile phone addresses I have mentioned? I thought of using Calling-Station-Id =/^080[234]/ but

(RADIATOR) Re: Multiple Calling-Station-Id

2002-08-14 Thread Hugh Irvine
Hello Tunde - No - you can only have a single PoolHint - why do you want more? For your second question, you would do something like this: Handler Client-Identifier = specialNAS, Calling-Station-Id = /^080[234]/> # deal with the requests .. /Handler> Handler Calling-Station-Id =

(RADIATOR) getting user information running AuthBy Test

2002-08-14 Thread Zack W. Kneisley
I'm currently using a windows2000 IAS server for our radius, but am Going to be using radiator soon.. I know I can have Radiator authenticate Using AuthBy ADSI to my domain controler, But I want to move this to a MySQL db for authentication. Because Win2000 does not allow passwords to be

Re: (RADIATOR) Re: Multiple Calling-Station-Id

2002-08-14 Thread Claudio Lapidus
Hello Hugh, Lurking over this thread, I see that you define how to handle a partial ANI number match: For your first point, you could also use something like this: Handler Client-Identifier = specialNAS, Calling-Station-Id =/^080[234]/ We have a similar situation here, but we need to

Re: (RADIATOR) Re: Multiple Calling-Station-Id

2002-08-14 Thread Ayotunde Itayemi
Hi Hugh, Thanks for the replies. I noticed a curious thing though I am not sure of exactly when it happened. I changed one of the IP address pools defined in my AddressAllocator SQL to the same name asthe identifier for a NAS. Below is the DYNAADDRESS clause I used for the Handler for the

Re: (RADIATOR) Re: Multiple Calling-Station-Id

2002-08-14 Thread Hugh Irvine
Hello Claudio - You cannot use regular expressions in SQL queries, but SQL itself is designed with pattern matching capabilities. regards Hugh On Thursday, August 15, 2002, at 06:05 AM, Claudio Lapidus wrote: Hello Hugh, Lurking over this thread, I see that you define how to handle a

Re: (RADIATOR) getting user information running AuthBy Test

2002-08-14 Thread Hugh Irvine
Hello Zack - I am not quite sure what you mean below, could you give me a few more details on what you want to do with the AuthBy TEST? For your second question, the ENCRYPTEDPASSWORD is a UNIX encrypted password. Other forms of encryption are supported with prefixes as described in

Re: (RADIATOR) Re: Multiple Calling-Station-Id

2002-08-14 Thread Hugh Irvine
Hello Tunde - As always, the only way I can see what is going on is by looking at the configuration file and the trace 4 debug. regards Hugh On Thursday, August 15, 2002, at 06:14 AM, Ayotunde Itayemi wrote: Hi Hugh, Thanks for the replies. I noticed a curious thing though I am not sure of

RE: (RADIATOR) getting user information running AuthBy Test

2002-08-14 Thread Zack W. Kneisley
Basicly I want to use AuthBy SQL using the MySql Db that I created using the .sql file in the goodies dir if the username isn't there I want it to be created with the password they used, thus creating their record so then next time they log on it will be challenged. I'm not sure where I was

(RADIATOR) hardware specs

2002-08-14 Thread rcortez
Hello, Can I ask if a Sun Netra T1 server with 512 memory sufficient for large installation using radiator? Ray === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the