(RADIATOR) radpwtst -gui requirements
Hi, What versions of perl, Tcl/Tk and the perl Tk modules work with radpwtst in the latest version of Radiator? I'm using perl 5.00503, tcl/tk 8.0.5 and Tk800.022 and I'm getting the following error when using -gui: Tk::Error: Can't locate auto/Tk/IO/TIEHANDLE.al in @INC (@INC contains: . /opt/radiator/lib/perl5/site_perl/5.005 /opt/radiator/libe/perl5/5.00503/i386-linux /usr/lib/perl5/5.00503/i386-linux /usr/lib/perl5/5.00503 /usr/lib/perl5/site_perl/5.005/i386-linux /usr/lib/perl5/site_perl/5.005 .) at /opt/radiator/lib/perl5/site_perl/5.005/Radius/RadpwtstGui.pm line 289 Carp::croak at /usr/lib/perl5/5.00503/Carp.pm line 279 AutoLoader::AUTOLOAD at /usr/lib/perl5/5.00503/AutoLoader.pm line 88 main::waitForSocket at /opt/radiator/lib/perl5/site_perl/5.005/Radius/RadpwtstGui.pm line 289 main::waitRecv at /opt/radiator/bin/radpwtst line 508 main::sendAuthReq at /opt/radiator/bin/radpwtst line 293 main::sendOnce at /opt/radiator/bin/radpwtst line 233 main::sendAll at /opt/radiator/bin/radpwtst line 221 main::send at /opt/radiator/lib/perl5/site_perl/5.005/Radius/RadpwtstGui.pm line 366 [\main::send] Tk callback for .frame1.button Tk::__ANON__ at /usr/lib/perl5/site_perl/5.005/i386-linux/Tk.pm line 217 Tk::Button::butUp at /usr/lib/perl5/site_perl/5.005/i386-linux/Tk/Button.pm line 111 (command bound to event) I had this running before, but I can't remember what combination of modules I used. Thanks for any help. -- L L Richi Plana, CCNA 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) ERR: No orig_authenticator supplied to check_authenticator
Hi, Still using Radiator-1.13.1 in one of our systems. What does the ff. error mean: ERR: No orig_authenticator supplied to check_authenticator We think its one of the last things that gets logged before Radiator dies. It could be a problem in MD5-hash or AuthRADIUS.pm (somewhere). Radiator dies (on the average) ten times a day. It's on a production system. Is there an easy way we can find out what the problem is without any downtimes? L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Accounting Stop Problem
On Tue, 18 Apr 2000, Rafael Ortega wrote: |o| I've been experiencing some trouble with Radiator and our TNT Max. |o| Two of our TNT boxes are sending the STOP accounting request |o| without the username, IP, etc. information, only the request id |o| (while the other two boxes work just fine). We compared the |o| config in the NAS for possible differences, but can't find any. Which versions of TAOS are running on the TNTs? We get the same Accounting-Request Stop packets without usernames and we've learned to just match IP addresses and ports rather than rely on username (acceptable so long as we don't miss succeeding Stop then Start packets) L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Reply Items in Access-Reject message?
On Mon, 3 Apr 2000, Rustam Povarov wrote: |o| How can I add some reply items in Access-Reject message? I need to |o| return h323-return-code=cause to my IVR script, if user not |o| exist in database. This is Cisco's problem: too little documentation. Too bad it's getting to the point where alternatives simply aren't feasible. 1) Make an entry in your dictionary file for the H323-Return-Code VSA attribute (Cisco's vendor code is 9) 2) All H323 VSA's should be return in the format: H323-attrib = "cisco-h323-attrib-id=value" ie. H323-Return-Code = "h323-return-code=0" BTW ... that's how attribs are passed by client to server, too. L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Changing the value of an attr in PreauthHook
Hi, Antonio. On Mon, 31 Jan 2000, Antonio Coloma wrote: |o| We want to change the value of the NAS-Port Attr in preAuthHook clause |o| ... |o| How can we do that? This has been asked several times and the solution has now been included in the new docs. If you want to change the attributes in the RADIUS packet before it is interpreted, you should use PreClientHook (in the global config) instead of Pre/PostAuthHook (in Realm or Handler). L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Help with USR TC attribute
Hi, Mike. On Fri, 1 Oct 1999, Mike McCauley wrote: |o| I have that in the USR dictionary as: |o| |o| VENDORATTR 429 MP-MRRU 0x982f integer Do you also have the one for vendor 429 attribute 36901? Our TC is spewing out that one. L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: [Fwd: (RADIATOR) Attrib to display message on Windows]
Hi, On Sun, 26 Sep 1999, Paul Black wrote: |o| Displaying a "server-assigned message in a window after |o| authorisation" sounds like a very good idea. Does anyone know if |o| it is possible? I believe it is. I've heard of one ISP sending out error messages and welcomes this way (no, not from the Philippines). L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Unpacking Radiator-2.14.x.tgz...
On Mon, 30 Aug 1999, Peter van Loenhout wrote: |o| Using "cat Radiator-x.x.tgz|gunzip -c|tar xvf -" gives the following |o| message: "gunzip: stdin: invalid compressed data-format violated". Have you verified that the file you downloaded was uncorrupted? You could check the file size. Maybe Mike could provide an MD5 signature. L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Solaris PAM and RADIUS
Hi, If any of you have successfully set up Solaris to authenticate and get user info from RADIUS, please point us to online references or documentations on the subject. Thanks. L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Radiator exits with No orig_authenticator supplied to check_authenticator
Hi, Stock Radiator-2.13.1 on x86 RedHat 6.0 (with kernel 2.2.9) exited on me several times in succession. The only entries in the logs which coincided with the exit warnings were several instances of the ff.: Sat Aug 21 09:48:33 1999: ERR: No orig_authenticator supplied to check_authenticator Is this a known issue? Are the two even related??? L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) remote login using radiator and postgres
On Tue, 10 Aug 1999, ray cortez wrote: |o| We are one of the ISP here in the Philippines and we are |o| currently using radiator as our authentication. We are having |o| problems on using postgres and radiator by remote login we've try |o| dbi:Pg:$database:$hostname but still we can't connect to remote |o| server Is there any configuration that we must do? Is |o| dbi:Pg:$database:$hostname also compatible with postgres? We've |o| try it using mysql and it works. First off, which AuthBy method are you using. Are the DBI drivers installed for PostgreSQL? Are your access permissions correctly set between your Radiator host/user and your PostgreSQL server? We've tried Radiator with PostgreSQL (or Perl, in general) with PostgreSQL and can verify that it works. L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Ascend-Data-Filter and Radiator
Hi, On Fri, 2 Jul 1999, Richi Plana wrote: |o| I noticed in the Radiator dictionary, Ascend-Data-Filter had been |o| changed from type string to type abinary. Would that affect |o| anything? Okay, okay. I just figured out that abinary stands for Ascend binary. It's some vendor-proprietary data type. I only figured it out from the Radiator source. Ascend needs to improve their documentation. Looks like Radiator is sending the right packets. Now it's either there's something wrong with my configs or the TNT (or just perhaps its TAOS 7.0.4) is busted. L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) disconnect on demand
Hi, Thomas. On Fri, 2 Jul 1999, Thomas Voss wrote: |o| has anyone got a tool to disconnect an user's session on a CISCO |o| or ASCEND box? If you've got SNMP configured on the NASes, you can use one of the SNMP utilities (or use an SNMP library with your favorite language to create your own program) to disconnect interfaces. For example, on a Cisco router, you could do: $ snmpset routerIP RWCommunity .iso.org.dod.internet.private.enterprises.cisco.local.lsystem.sysClearInt.0 i ifEntry L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Ascend abinary documentation
Hi, (I hope I'm still on-topic) Would someone point me to documentation covering the format of the Ascend abinary attribute format? I've been reading the docs which come with our MaxTNT and it seems there are discrepancies with the way the attribute is supposed to be formatted (at least in text). Subnets are specified in Radiator using the piece of code: "dstip x.x.x.x/y", but according to the MaxTNT manual, it should be specified thus: "dstip x.x.x.x\y.y.y.y" (note the backslash and the netmask instead of the network no.). I'm thinking that the reason I've been having problems with Ascend-Data-Filter is that Radiator knows a different attribute format than what the TNT is expecting. (Even if it isn't, it'd be good to have that knowledge, anyway) Perhaps the subnet is specified as a number from 0 to 32 by Radiator but the MaxTNT expects it in the form 255.255.255.128 L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Determining NAS vendor and model
On Wed, 30 Jun 1999, Mike McCauley wrote:
|o| Within Radiator you can use the Client NasType to find out what
|o| sort of NAS the client is, for example:
|o|
|o| $p-{Client}-{NasType}
How does Radiator determine this? SNMP? If so, SNMP has to be enabled in
the router, yes?
L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,-
LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / /
L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / /
L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-'
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) CHAP HOWTO
Hi, Mike, et al. On Sun, 6 Jun 1999, Mike McCauley wrote: |o| Just wondering how to check the attributes CHAP-Password and |o| CHAP-Challenge. Are there methods in any of the Radiator objects that |o| would allow ones own written AuthBy method to check this attrib? |o| |o| Radius::Radius::check_plaintext_password does most of the hard |o| work of checking a password against whatever arrived in the radius |o| request, be it CHAP, PAPA or whatever. It's a good function. Works like a charm. Is there some kind of documentation on Radius::Radius or the whole Radius module (as implemented in Radiator)? Seems there are a lot nifty functions just waiting to be used. BTW, although check_plaintext_password works as advertised, it won't work for us because it just hit me: we've stored clients' password using DES crypt(). If Radius::Radius::check_plaintext_password can work with that, I'd like to know how! L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) CHAP HOWTO
Hi, Just wondering how to check the attributes CHAP-Password and CHAP-Challenge. Are there methods in any of the Radiator objects that would allow ones own written AuthBy method to check this attrib? L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) AuthBy FILE to return REJECT?
Hi,
We've set up our Realm as follows:
Realm
AuthByPolicyContinueUntilAccept
AuthBy FILE
/AuthBy
AuthBy MYAUTH
Fork
... {some specific attribs}
/AuthBy
/Realm
The idea is that if the user is not found in %D/users, AuthFILE would
return Reject and Radiator would look to AuthMYAUTH for authentication.
This works fine. However, we would like AuthMYAUTH to handle Accounting
for both cases. Unfortunately, AuthFILE's default behavior for
Authentication is that it "ignores (but replies to) accounting requests".
Is there any way to achieve what we want without having to modify
AuthFILE.pm?
L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,-
LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / /
L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / /
L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-'
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) AuthBy FILE to return REJECT?
Hi, Mike.
On Fri, 4 Jun 1999, Mike McCauley wrote:
|o| AuthBy FILE should ACCEPT all accounting requests (thats what
|o| makes Radiator issue an acknowledgement when you just have AuthBy
|o| FILE). When we say "it ignores" we just mean that it doesnt
|o| actually log the information.
|o|
|o| Therefore, I would expect your example code to work, and it should
|o| always go on to MYAUTH for accounting.
Actually, we're expecting that in the case of Authentication, it would NOT
go to MYAUTH because FILE returns with an ACCEPT and we've set the
AuthByPolicy to ContinueUntilAccept. In fact, that's what exactly happens.
When tracing the result, Accounting stops at Radius::AuthFILE and doesn't
go on the Radius::AuthMYAUTH.
|o| Realm
|o|AuthByPolicyContinueUntilAccept
|o|AuthBy FILE
|o|/AuthBy
|o|AuthBy MYAUTH
|o|Fork
|o|... {some specific attribs}
|o|/AuthBy
|o| /Realm
L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,-
LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / /
L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / /
L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-'
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
(RADIATOR) Slow accounting
Hi, We're using AuthBy EXTERNAL (no Fork) for authentication and accounting and we use one MySQL database for both processes. We're finding that authentication is done in a reasonable amount of time (less than a second), but accounting is TERRIBLY slow. When an authentication request is made, its processing is started immediately and finishes just as fast. But when accounting is done, it takes typically 45+ seconds before it starts to get processed, but takes less than a second to process. L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Memory leak.
On Mon, 10 May 1999, Mike McCauley wrote: |o| For some reason we use Authby EXTERNAL and obtain memory leak |o| (about 4k for each 2-3 requests). |o| Does anyone have same problem? |o| |o| I have been able to reproduce this. It appears to be a leak in in |o| the perl IPC::Open2. I havenet been able to find any other reports |o| of this, or fixes in the perl literature. Anyone else know about |o| this? If a memory leak results in zombied processes, then I've seen a manifestation of this in our system. (assuming the usage of Fork). L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) zombie processes
Hi, On a x86/Linux (kernel 2.2.5) box, I'm getting a lot of zombie Radiator processes. On a Sparc/Solaris 2.6 box, I'm getting a couple of defunct ones. Is there any way to trace why this happens and to get rid of it? It's eating up precious resources. L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Problem with AuthBy EXTERNAL
Hi,
I originally wrote this email with the software author as the intended
recepient, but then I read the Terms of Support (which to say is none), so
I'm posting here:
Because of certain requirements, we need to use AuthBy EXTERNAL to
authenticate our users. Each time I try, however, the Radius client simply
times out. We know the external program gets executed, but Radiator can't
seem to "see" the external program's reply.
We're running Radiator on a Sparc/Solaris 2.6 system. We tried using the
ff. test programs:
external.c:
#include stdio.h
#include stdlib.h
int main(int argc, char argv[]) {
printf("\tUser-Service-Type = Framed-User\n");
printf("\tFramed-Protocol= PPP\n");
exit(0);
}
and external.pl:
#!/opt/perl/bin/perl -w
open LOG, "/opt/Radiator/log/external.log" || exit 1;
while (STDIN) {
print LOG $_;
}
close LOG;
print "\tUser-Service-Type = Framed-User\n".
"\tFramed-Protocol= PPP\n";
exit 0;
Both programs get executed, but the clients just Times out. In
AuthEXTERNAL.pm, in sub handle_request, after waitpid, I get $? = -1 (and
$result = $? 8 = 16777215). I am positive that the external program
gets executed.
Hope someone can help.
L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,-
LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / /
L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / /
L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-'
--PGP key http://www2.mozcom.com/~richip/richip.asc
===
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Prefix configuration
Hi, On Tue, 20 Apr 1999, Enrique Vadillo wrote: |o| I want to configure radiator so that usernames that use prefix 'HELLO/' |o| are authenticated by radius server with IP 200.56.78.9 and all other users |o| authenticated by radius server with IP 190.34.6.89 You can probably use: Realm /^HELLO\// AuthBy RADIUS Server 200.56.78.9 ... /AuthBy /Realm Realm DEFAULT AuthBy RADIUS Server 190.34.6.89 ... /AuthBy /Realm L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' --PGP key http://www2.mozcom.com/~richip/richip.asc === To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
