(RADIATOR) How to custom authentication query?

2003-08-28 Thread Huaikun Lin
Hi I am using radiator 3.6 with SQL server 7. Use AuthBy EMERALD module to authenticate dialup. If I want to custom the authentication query statement,what should I do? Lin --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.512

Re: (RADIATOR) How to custom authentication query?

2003-08-28 Thread Hugh Irvine
Hello Lin - See section 6.32 in the Radiator 3.6 reference manual (doc/ref.html), and the code in Radius/AuthEMERALD.pm if you are interested in the nitty-gritty details. regards Hugh On Thursday, Aug 28, 2003, at 11:40 Australia/Melbourne, Huaikun Lin wrote: Hi I am using radiator 3.6

Re: (RADIATOR) EAP Authentication

2003-08-28 Thread Hugh Irvine
Hello Chris - I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening. Also note that you should be running Radiator 3.6 plus all the latest patches. Could you also provide more details on what you mean by The

(RADIATOR) Something for the Wish List

2003-08-28 Thread Brian Morris
Hi folks, I would like to propose a 'feature' to add to the Radiator wishlist. How about a feature where, if a customer is not permitted more than one simultaneous login, that the system allows the second connection to connect, but also drops the first connection. This will have two benefits to

Re: (RADIATOR) How to custom authentication query?

2003-08-28 Thread Huaikun Lin
Hi At 12:59 PM 8/28/2003 +1000, Hugh Irvine wrote: Hello Lin - See section 6.32 in the Radiator 3.6 reference manual (doc/ref.html), and the code in Radius/AuthEMERALD.pm if you are interested in the nitty-gritty details. We are using platypus 4.0. Have many different type of dialup and ADSL

Re: (RADIATOR) How to custom authentication query?

2003-08-28 Thread Huaikun Lin
Hi At 12:59 PM 8/28/2003 +1000, Hugh Irvine wrote: Hello Lin - See section 6.32 in the Radiator 3.6 reference manual (doc/ref.html), and the code in Radius/AuthEMERALD.pm if you are interested in the nitty-gritty details. We are using platypus 4.0. Have many different type of dialup and ADSL

Re: (RADIATOR) AuthBy ADSI configuration

2003-08-28 Thread Hugh Irvine
Hello Geoffrey - To do what you describe you should change CN=%0 to samaccountname=%0. I am not quite sure what your requirements are for VPDN users - can you clarify? For a detailed description of the AuthBy ADSI clause please see section 6.40 in the Radiator 3.6 reference manual

Re: (RADIATOR) How to custom authentication query?

2003-08-28 Thread Hugh Irvine
Hello Lin - This is usually done by setting up Handlers for the different types of access, possibly with seperate session databases if required. # define Client clauses with Identifiers Client Identifier DIALUP . /Client Client . Identifier ADSL

Re: (RADIATOR) How to custom authentication query?

2003-08-28 Thread Huaikun Lin
Hi Hugh Thank you for help. But we have half dialup customers coming from the same radius clients(proxies, not controlled by us.) as ADSL. Is there any way can solve the problem? Lin At 01:36 PM 8/28/2003 +1000, Hugh Irvine wrote: Hello Lin - This is usually done by setting up Handlers for

Re: (RADIATOR) Something for the Wish List

2003-08-28 Thread Bret Jordan
That would open a really bad DOS attack. Bret Brian Morris wrote: Hi folks, I would like to propose a 'feature' to add to the Radiator wishlist. How about a feature where, if a customer is not permitted more than one simultaneous login, that the system allows the second connection to connect,

Re: (RADIATOR) How to custom authentication query?

2003-08-28 Thread Hugh Irvine
Hello Lin - You should look at a trace 4 debug of the various access requests that you receive to see what you can use to differentiate between the different services. Perhaps you can use NAS-Port-Type or possibly the Calling-Station-Id and/or Called-Station-Id. BTW - we are available for

Re: (RADIATOR) Something for the Wish List

2003-08-28 Thread Brian Morris
I don't see how (but I would love to find out) If they must first authenticate successfully before we boot the other one off then I can't see how it would cause a DOS. If I am missing something please correct me - It wouldn't be the first time :-) Regards, Brian - Original Message

Re: (RADIATOR) How to custom authentication query?

2003-08-28 Thread Andrew Stevenson
On Thu, 28 Aug 2003, Huaikun Lin wrote: If I want to custom the authentication query statement,what should I do? Try AuthBy SQL. Andrew === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe

Re: (RADIATOR) Something for the Wish List

2003-08-28 Thread Hugh Irvine
Hello Brian - You could probably implement this with a PreClientHook to do what you describe. There are some example hooks in the file goodies/hooks.txt. regards Hugh On Thursday, Aug 28, 2003, at 13:06 Australia/Melbourne, Brian Morris wrote: Hi folks, I would like to propose a 'feature'

Re: (RADIATOR) How to handle Accounting request in AuthURL

2003-08-28 Thread Mike McCauley
Hello All, On Tue, 26 Aug 2003 11:12 pm, Frank Danielson wrote: Hugh- I can't speak for Angus but it makes sense that if you are passing authentication reqests to an external system using AuthBy URL that you may want to pass accounting requests to that same system. It's something that we

(RADIATOR) finger and Cisco

2003-08-28 Thread Andrew Stevenson
Hi, Over the last day or so radiator has started to try and finger one of our NASs. At trace level 4 I get: Thu Aug 28 16:45:36 2003: DEBUG: Checking if user is still online: Cisco, XX, X.X.X.X, 20003, 2AA7 Thu Aug 28 16:45:36 2003: DEBUG: Cisco: Checking ISDN X.X.X.X:20003:XX Thu

Re: (RADIATOR) Problems with BindAddress

2003-08-28 Thread Hugh Irvine
Hello Paul - Further to this I note that there is a patch for Radiator 3.6 that addresses something like this: AuthBy RADIUS could crash if BindAddress was set to multiple comma-separated addresses. Reported by Anthony Stanton. regards Hugh On Wednesday, Aug 27, 2003, at 15:51

Re: (RADIATOR) finger and Cisco

2003-08-28 Thread Hugh Irvine
Hello Andrew - The code in Radius/Nas/Cisco.pm will try to use finger if the NAS-Port is ISDN (2). This was a contribution that was added in Radiator 3.4. I have copied Mike on this mail for his comments (I am not sure what to suggest). regards Hugh On Thursday, Aug 28, 2003, at 17:06

Re: (RADIATOR) AuthBy ADSI configuration

2003-08-28 Thread DUFOUR Geoffrey
Hello Hugh, It does not work (I get an Access-Reject). You will find hereafter DEBUG information for several configurations : With the BindString LDAP://myserver/SAMAccountName=%0,OU=Marketing,OU=Employee,DC=staff,DC=mycompany,DC=com ... parameter : DEBUG== Thu Aug