(Fwd) (RADIATOR) Ascend pools supported?

1999-07-20 Thread Mike McCauley


--- Forwarded mail from [EMAIL PROTECTED] (Hugh Irvine)

Date: Tue, 20 Jul 1999 11:05:03 +1000
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED] (Hugh Irvine)
Subject: (RADIATOR) Ascend pools supported?

Received: from yarrina.connect.com.au (yarrina.connect.com.au
[192.189.54.17]) by perki.connect.com.au with ESMTP id BAA21009
  (8.8.8/IDA-1.7 for [EMAIL PROTECTED]); Tue, 20 Jul 1999 01:54:20
+1000 (EST)
X-Sender: [EMAIL PROTECTED] (Unverified)
Date: Mon, 19 Jul 1999 10:53:29 -0500
To: [EMAIL PROTECTED]
From: John Coy [EMAIL PROTECTED]
Subject: (RADIATOR) Ascend pools supported?
Mime-Version: 1.0
Sender: [EMAIL PROTECTED]
Precedence: bulk
Status:

Does Radiator 2.13.1 support the Ascend pool
definition pseudo-user?  If so, can someone
provide a sample configuration (if it varies
from the default Ascend config).


Yes. Default Ascend configuration should be fine.

**Mike** - is there an example somewhere? I couldn't see anything in the
goodies directory.

Hugh





---End of forwarded mail from [EMAIL PROTECTED] (Hugh Irvine)

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(Fwd) (RADIATOR) WARNING: Bad authenticator errors

1999-07-20 Thread Mike McCauley


--- Forwarded mail from [EMAIL PROTECTED] (Hugh Irvine)

Date: Tue, 20 Jul 1999 11:05:12 +1000
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED] (Hugh Irvine)
Subject: (RADIATOR) WARNING: Bad authenticator errors

Received: from yarrina.connect.com.au (yarrina.connect.com.au
[192.189.54.17]) by perki.connect.com.au with ESMTP id DAA27391
  (8.8.8/IDA-1.7 for [EMAIL PROTECTED]); Tue, 20 Jul 1999 03:44:15
+1000 (EST)
X-Sender: [EMAIL PROTECTED] (Unverified)
Date: Mon, 19 Jul 1999 12:43:17 -0500
To: [EMAIL PROTECTED]
From: John Coy [EMAIL PROTECTED]
Subject: (RADIATOR) WARNING: Bad authenticator errors
Mime-Version: 1.0
Sender: [EMAIL PROTECTED]
Precedence: bulk
Status:

I'm receiving a steady stream of bad authenticator
errors in my log file (at trace level 3).

Mon Jul 19 12:42:40 1999: WARNING: Bad authenticator received in reply to ID
77

They're coming once a second or so.  What does that error
message mean?


Either the secret is incorrectly configured between the NAS and the
Radiator Client ... clause, or the NAS is not using a proper
Authenticator. If the latter, use IgnoreAcctSignature in the configuration
file.

Hugh





---End of forwarded mail from [EMAIL PROTECTED] (Hugh Irvine)

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(Fwd) (RADIATOR) SQL accounting

1999-07-20 Thread Mike McCauley


--- Forwarded mail from [EMAIL PROTECTED] (Hugh Irvine)

Date: Tue, 20 Jul 1999 11:04:58 +1000
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED] (Hugh Irvine)
Subject: (RADIATOR) SQL accounting

Received: from yarrina.connect.com.au (yarrina.connect.com.au
[192.189.54.17]) by perki.connect.com.au with ESMTP id XAA13574
  (8.8.8/IDA-1.7 for [EMAIL PROTECTED]); Mon, 19 Jul 1999 23:52:14
+1000 (EST)
From: "Jamie Orzechowski" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: (RADIATOR) SQL accounting
Date: Mon, 19 Jul 1999 09:57:31 -0400
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2918.2701
Sender: [EMAIL PROTECTED]
Precedence: bulk
Status:

I have successfully created a database call ACCOUNTING on my SQL server with
all the tables I need ...

how can I make it authenticate via RODOPI as usual and also send just the
accounting records to another database (while still sending them to my
rodopi database also)

my config which works fine is

AuthBy RODOPI
DBSourcedbi:Sybase:rodopi
DBUsername  Rodopi
DBAuth  xx
/AuthBy

I would also like to send the following to another database called
"SPAMTRACKER"

AccountingTable ACCOUNTING
AcctColumnDef   USERNAME,User-Name
AcctColumnDef   TIME_STAMP,Timestamp,integer
AcctColumnDef   ACCTSESSIONTIME,Acct-Session-Time,integer
AcctColumnDef   NASPORT,NAS-Port,integer
AcctColumnDef   FRAMEDIPADDRESS,Framed-IP-Address


You will need something like this:

Realm 
# Set up a series of AuthBy to handle both tasks
AuthByPolicy ContinueAlways
# First AuthBy logs all accounting records to SPAMTRACKER database (note
empty AuthSelect)
AuthBy SQL
DBSource  dbi:Sybase:SPAMTRACKER
DBUsername  
DBAuth  
AuthSelect
AccountingTable ACCOUNTING
AcctColumnDef   USERNAME,User-Name
AcctColumnDef   TIME_STAMP,Timestamp,integer
AcctColumnDef   ACCTSESSIONTIME,Acct-Session-Time,integer
AcctColumnDef   NASPORT,NAS-Port,integer
AcctColumnDef   FRAMEDIPADDRESS,Framed-IP-Address
/AuthBy
# Then do your normal authentication with Rodopi
AuthBy RODOPI
DBSourcedbi:Sybase:rodopi
DBUsername  Rodopi
DBAuth  xx
/AuthBy
/Realm

Hugh





---End of forwarded mail from [EMAIL PROTECTED] (Hugh Irvine)

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) duplicating accounting?

1999-07-20 Thread Mike McCauley

Hi Ricardo,

On Jul 19,  4:25pm, Ricardo Kustner wrote:
 Subject: (RADIATOR) duplicating accounting?
 Hi,

 this request may sound a bit odd or simply impossible... but right now
 accounting is still handled by another radiusd in our network, which is
 connected to selfmade accounting software. We want to start with radiator
 handling accounting too, but before we have finnished a system for that, we
dont
 want to loose the old account software immediately so i was wondering if
 it's somehow possible to have radiator store the accounting plus have it
 send to another accounting server ?

Yes this is certainly possible, and many people have handled migration
issues in exactly this way.

You don't mention how you want to configure the new Radiator
implementation, but here is a simple example showing how to relay *all*
requests to your old system, and also save the acounting details both top SQL
and to a file. You can then add things to Radiator as they
become available.

Here's an example:

Realm 
AuthByPolicy ContinueAlways
# This saves the accounting to asn SQL database:
AuthBy SQL
# the usual stuff

AuthSelect

AcctColumnDef 
AcctColumnDef 
/AuthBy

# Set up an AuthBy to forward requests to the old Radius server
AuthBy Radius
Host  radiushost
Secret  yoursecret
/AuthBy

# This also saves the accounting to a local file
AcctLogFileName %L/detail

/Realm


Hope that helps.

Cheers.

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Radiator 2.14 how compressed? [offtopic]

1999-07-20 Thread Ricardo Kustner


On 16-Jul-99 Karl Gaissmaier wrote:
 was anyone successful with downloading and decompression of the
 Radiator-2-14.tgz?

did you download it on a unix or windows machine? i recently noticed
often getting broken archives when i download with Netscape on NT...

Ricardo.
---
--
E-Mail: Ricardo Kustner [EMAIL PROTECTED]
Date: 20-Jul-99
Time: 09:16:28

This message was sent by XFMail
--

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) A few configuration questions

1999-07-20 Thread Mike McCauley

Hi Bill,

On Jul 19, 12:29pm, Bill wrote:
 Subject: (RADIATOR) A few configuration questions

 I'm in the process of moving from Merit Radius to Radiator, and have the
 following requirements:

 1. any login's of "guest" should be Rlogin'd to a specific machine with the
 username 'guest'

You should be able to move your current guest user entry from Merit directly to
Radiator user file.



 2. username@shell should Rlogin to a specific IP, as the username.
 Do I handle this with a seperate realm like 'Realm /shell/',
 or am I going about it all wrong?  Assuming this is right, how to
 I add the Attributes to the return packet?
I guess you mean "anyone who logs in as xxx@shell"? you wnat to authenticaet
them in the usual way, but to firce some special reply items that wil give them
a shell session?
You should proably do something like this:

Realm shell
AuthBy whatever
.

# Specail shell reply items here:
AddToReply  attr=valu,attr=val
/AuthBy
/Realm



 3. I would like to AuthBy SYSTEM with /etc/shadow under Solaris,
 right now I'm doing testing with AuthBy UNIX but our shadow file
 is 12000+ lines and it takes too long to re-read it.
 ftp://dagobert.eur.nl/pub/homebrew/Shadow-0.01.tar.gz is missing, where can
 I find Shadow-0.01.tar.gz?
Copy attached.
A web search for a more recent version might be an idea?




 4. Framed-IP-Address, Framed-IP-Netmask and Port-Limit(and probablly some
other
attributes) need to be read from our current users file.

They should move across from Merit without modification.



 I'm starting to under stand the configuration in bits and pieces but if
 someone could give me a rough overview of how to fit all of this together
 it'd be much appreciated.

Radiator is completely compatible with Merit user files, so all you shold have
to do is to set up an AuthBy FILE pointing to your existing Merit user file.

Cheers.



-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody

 Data


(RADIATOR) 2.14 breaks my cfg ?

1999-07-20 Thread Ricardo Kustner

Hi,

first, i had to add a line to strip something from the default realm to have it
working for those accounts however, when i install 2.14 with the cfg which
worked fine with 2.13, some realms don't seem to work correctly... the users
get authenticated (Trace 4 doesn't show anything weird) but somehow the
connections aren't working correctly... i think it could be something wrong
with the AddToReply's i use...
i don't want to post my complete cfg since there's too much sensitive
information in it, so i'll try to show some parts of the cfg which i think may
be the ones causing trouble... I have one default realm, which looks up users
in the mysql database and if it doesnt find them, the requests are proxied to
radiusd on a different server which uses the /etc/passwd overthere. There's
also one other realm that sets the Ascend-Data-Filter's to make sure the
accounts can only make a connections through port 25... and two other realms
which we use for seperate mysql user databases.
At the top of the cfg i have this :
RewriteUsername s/^(B.*)/$1\@bsmtp/
which means every account starting with 'B' will be converted to Baccount@bsmtp
and thus be handled by the bsmtp realm (will this still work with 2.14?).

The bsmtp realm has the following AddToReply:

AuthSelect select PASSWORD, CHECKATTR, REPLYATTR from \
SUBSCRIBERS where USERNAME='%n' and DISABLED = 0

AddToReply Ascend-Data-Filter = "ip out forward", \
Ascend-Data-Filter = "ip in forward icmp", \
Ascend-Data-Filter = "ip in forward udp", \
Ascend-Data-Filter = "ip in forward tcp est", \
Ascend-Data-Filter = "ip in forward dstip 10.1.2.3/24 tcp", \
Ascend-Data-Filter = "ip out forward tcp srcport = smtp", \ 
Ascend-Data-Filter = "ip out forward tcp dstport = smtp", \
Ascend-Data-Filter = "ip in forward tcp srcport = smtp", \ 
Ascend-Data-Filter = "ip in forward tcp dstport = smtp", \
Ascend-Data-Filter = "ip out forward tcp srcport = 110", \ 
Ascend-Data-Filter = "ip out forward tcp dstport = 110", \
Ascend-Data-Filter = "ip in forward tcp srcport = 110", \ 
Ascend-Data-Filter = "ip in forward tcp dstport = 110"

(actually i'm thinking about cleaning this up by using Filter's inside
our ascend-max but i didnt get those darn things to work like they should...
does any1 have some examples/info?)

Thanks,
Ricardo.
--
E-Mail: Ricardo Kustner [EMAIL PROTECTED]
Date: 20-Jul-99
Time: 09:33:58

This message was sent by XFMail
--

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) authentication woes

1999-07-20 Thread Josh Bressers

I'm currently having trouble with some xyplex terminal servers and
radiator.  Sometimes the users will authenticate, and sometimes the only
error I see is Bad Encrypted-Password for the user that fails to get in.
I have tested this and it is not a bad password.  Does anyone know if
there are any issues between radiator and xyplex hardware?  Any help
would be appreciated.

JB

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Netware LDAP

1999-07-20 Thread Mark O'Leary

We would like to authenticate against an LDAP server, but rather than
actually look up and return the value of the PasswordAttr field to Radiator,
we'd like to send the uid and password, and simply have the LDAP server
authenticate this against its one-way hash'ed password for that user and
just return an 'accept' or 'reject'...

This would be preferable because we use an LDAP server with a Netware NDS
back-end that already incorporates an NDS password (i.e. one that isnt
accessible via an LDAP attribute) for other services, and rather than
extending the schema with a password attribute that is a snapshot of the NDS
password, we'd like to use it directly.

Has anyone created a solution for this?

If not, can anyone offer advice on creating an AuthBy module to perform as
described above?

M.

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Mark O'Leary,| Voice: +44 (0161) 2756110 | Mark O'Leary,
 Network Support Officer, |   Fax: +44 (0161) 2756040 | Deputy Warden,
 Manchester Computing, UK | Email: [EMAIL PROTECTED] | Moberly Hall, UoM.

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Problems with SessionDatabase

1999-07-20 Thread Shaun Lessman

Looks like it was a trailing backslash left over from the NT config. Removed
it and it's working.

Thanks!

Shaun
[EMAIL PROTECTED]

 probably you have some sort of typo before this in your configuration
file,
 possible a missing /.. clause terminator? Did you get any other errors
 printed?

 Have a close look at your config file.

 On Jul 19, 11:51am, Shaun Lessman wrote:
  Subject: (RADIATOR) Problems with SessionDatabase
  I am working on moving Radiator from our NT servers over to UNIX boxes
and
  am having a problem where the SessionDatabase directive doesn't seem to
be
  understood on the UNIX boxes. The config file is virtually the same as
on
  the NT servers, with the exception of the DBSource value. The reason the
  DBSource value is explicitly defined instead of being defined in the
Sybase
  interfaces file is that I could never get lookups to work against that
file
  using FreeTDS DBD, even with $SYBASE set correctly. Any help would be
  appreciated.


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) MS SQL 7.0 and FreeTDS

1999-07-20 Thread Robert Mann

Has anyone had successful attempts to use FreeTDS with MS SQL 7?  If so do
you have any tips or problems that you encountered along the way?  Certain
versions of FreeTDS or other perl mods that have to be used with each other
or any other helpful tips to making it work?  We use Sparc 5's with Solaris
for our radiator radius servers and of course NT for our database servers
(Due to Platypus).

Thanks in advance,
Robert Mann

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) routing a network

1999-07-20 Thread Jay C. Pharis


I seem to be having some problems routing a network to a user.  Here is
what is in my config file:

burgerboat Auth-Type=System,Simultaneous-Use=2
Framed-IP-Address = 206.40.102.247
Idle-Timeout = 0
Framed-Route = "206.40.97.48/29 206.40.102.247 1"
Service-Type = Framed-User

The static IP gets assigned no problem, but the route never gets thrown
in.

I also tried adding this line, but no luck.  Suggestions?

Framed-Routing = Broadcast-Listen

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) routing a network

1999-07-20 Thread Rui Cohen

Jay C. Pharis wrote:
 
 I seem to be having some problems routing a network to a user.  Here is
 what is in my config file:
 
 burgerboat Auth-Type=System,Simultaneous-Use=2
 Framed-IP-Address = 206.40.102.247
 Idle-Timeout = 0
 Framed-Route = "206.40.97.48/29 206.40.102.247 1"
 Service-Type = Framed-User


You should have a comma between each reply item.

Something like this:

burgerboat Auth-Type=System,=2
 Framed-IP-Address = 206.40.102.247,
 Idle-Timeout = 0,
 Framed-Route = "206.40.97.48/29 206.40.102.247 1",
 Service-Type = Framed-User

And btw, you should remove the check-item "Simultaneous-Use=2" (is hard
to route the same network for 2 destinations).


King regards,
---
rui cohen

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) routing a network

1999-07-20 Thread Jay C. Pharis

 
 You should have a comma between each reply item.

That doesn't seem to matter in other entries.  I tried what you
suggested and it still doesn't work.

 Something like this:
 
 burgerboat Auth-Type=System,=2
  Framed-IP-Address = 206.40.102.247,
  Idle-Timeout = 0,
  Framed-Route = "206.40.97.48/29 206.40.102.247 1",
  Service-Type = Framed-User
 
 And btw, you should remove the check-item "Simultaneous-Use=2" (is hard
 to route the same network for 2 destinations).

Ah, but it is to the same IP, so it shouldn't really matter, should it?
It's nothing more than a dual-channel ISDN connection.


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Build SQL

1999-07-20 Thread Matt Chambers

I used a radius users file and buildsql to import uses into my
mysql databaseshouldn't some of the things in CheckAttr go
under Reply Attr?

CheckAttr: User-Service = "Framed-User",Framed-Protocol =
"PPP",Framed-Routing = "None",Framed-Route = "None",Framed-IP-Address =
"255.255.255.254",Framed-IP-Netmask = "255.255.255.255"

ReplyAttr: Framed-Compression = "Van-Jacobson-TCP-IP"

2nd question...would it be possible to just delete CheckAttr and Reply
Attr
out of my database and make seperate entries for each attribute I
want to use. Then I can use PHP3+html to modify each individual item
if needed.

What would happen If I just deleted everything and used User,Pass, and
Framed-IP-Address?

I'm using PM3's and USR HiPer Arcs.


Matthew Chambers
NOC Manager
The PressRoom Online Services

p:703.631.5755 x3001
f:703.818.1277



The box said "Windows 95 or better."
So, I installed Linux.

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Multiple instances of the same username ??

1999-07-20 Thread Gary

Many thanks to those that are helping me on the Tigris issue...

Now is it possible to have multiple instances of the same username but
different "passwords in radius ??

usernameCalling-Station-Id=12345678



usernameCalling-Station-Id=45678899


Or will radius just see the first if its the second and just bomb out
authenticating on the second ??

Gary


---
Ausmail 
Your virtual home on the net.
Email, News  Home pages.
---
Coming soon !!


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Multiple instances of the same username ??

1999-07-20 Thread Gary

On Wed, 21 Jul 1999 12:45:38 +1000, tom minchin wrote:

On Wed, Jul 21, 1999 at 01:49:39PM +1000, Gary wrote:
 Many thanks to those that are helping me on the Tigris issue...
 
 Now is it possible to have multiple instances of the same username but
 different "passwords in radius ??
 
 username Calling-Station-Id=12345678
 
 
 
 username Calling-Station-Id=45678899
 
 
 Or will radius just see the first if its the second and just bomb out
 authenticating on the second ??
 

It'll continue on until it gets an accept or falls off the end of the file.

Can also have:

username   Calling-Station-Id=/123456|7654321/

Saves you a line.

[EMAIL PROTECTED]

Ah, but thats harder to track plus wont give the user name for
accounting

I will actually try separate setups for each one, but it is an easy way
to give a user 2 numbers to dial in from thanks...

The biggest pain in all this is the different requirements for
different dialin boxes...

methinks, my ascend gear will be sale, I like the tigris too much :-)

Gary
---
Ausmail 
Your virtual home on the net.
Email, News  Home pages.
---
Coming soon !!


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) authentication woes

1999-07-20 Thread Mike McCauley

Hello Josh,

Radiator has no known problems with Xyplex. It sounds a bit like you have the
shared secret set wrong for one or more of your Xyplex's, but set correctly for
others.

If the secret is set wrong, the only symptom you will see is "Bad Password".

If you are still stuck, please forward your radiator log file at trace level 4
and your config file (no secrets).

Hope that helps.
Cheers.


On Jul 20,  9:48am, Josh Bressers wrote:
 Subject: (RADIATOR) authentication woes
 I'm currently having trouble with some xyplex terminal servers and
 radiator.  Sometimes the users will authenticate, and sometimes the only
 error I see is Bad Encrypted-Password for the user that fails to get in.
 I have tested this and it is not a bad password.  Does anyone know if
 there are any issues between radiator and xyplex hardware?  Any help
 would be appreciated.

   JB

 ===
 Archive at http://www.thesite.com.au/~radiator/
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.
-- End of excerpt from Josh Bressers



-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) MySQL

1999-07-20 Thread Mike McCauley

Hello Ben-Nes,

On Jul 20, 11:59am, Ben-Nes Michael wrote:
 Subject: (RADIATOR) MySQL
 Hi

 2 Q.

 can any one send me configuration file of accounting  authentication
 against MySQL database, so i can browse it and learn more easily ?
There is an example schema in goodies/mysqlCreate.sql, which will work with the
example config file in goodies/sql.cfg


 does any one have a script that scan a Livingston users file and submit
 it to a database ?
buildsql will do that

For more information on both topics, please read the reference manual at
http://www.open.com.au/radiator/ref.html, and also in your Radiator
distribution.

Cheers.


-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Multiple instances of the same username ??

1999-07-20 Thread Mike McCauley

Hi Gary,

On Jul 21,  3:56pm, Gary wrote:
 Subject: Re: (RADIATOR) Multiple instances of the same username ??
 On Wed, 21 Jul 1999 12:45:38 +1000, tom minchin wrote:

 On Wed, Jul 21, 1999 at 01:49:39PM +1000, Gary wrote:
  Many thanks to those that are helping me on the Tigris issue...
 
  Now is it possible to have multiple instances of the same username but
  different "passwords in radius ??
 
  username   Calling-Station-Id=12345678
 
  
 
  username   Calling-Station-Id=45678899
 
 
  Or will radius just see the first if its the second and just bomb out
  authenticating on the second ??
 
 
 It'll continue on until it gets an accept or falls off the end of the file.
 
 Can also have:
 
 username Calling-Station-Id=/123456|7654321/
 
 Saves you a line.
 
 [EMAIL PROTECTED]

 Ah, but thats harder to track plus wont give the user name for
 accounting

 I will actually try separate setups for each one, but it is an easy way
 to give a user 2 numbers to dial in from thanks...

 The biggest pain in all this is the different requirements for
 different dialin boxes...

If thats the case, you should probably consider using Handlers to distinguish
between your NAS types:

Handler NAS-IP-Address=1.2.3.4
AuthBy whatever
.

AddToReply standard reply items for this NAS
/AuthBy
/Handler

Handler NAS-IP-Address=1.2.3.5
AuthBy whatever
.

AddToReply standard reply items for this NAS
/AuthBy
/Handler

etc

Just a suggestion.

Cheers.




-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Framed-Ip-Address

1999-07-20 Thread Mike McCauley



 Hello
 I would like to know how to
 get Framed-Ip-Address value
 into a posthook function
 I have tried
 my $framedip = $p-getAttrByNum($Radius::Radius::FRAMED_IP_ADDRESS);
 but it doesn't seem to work
 Thanks a lot to help me.


I guess you have confirmed that the incoming request has a Framed-IP-Address
attribute in it?

your hook should look something like this:

sub {
my $p = ${$_[0]};
my $framedip = $p-getAttrByNum($Radius::Radius::FRAMED_IP_ADDRESS);
}


Hope that helps.
Cheers.

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.