Hello everyone,
After good authentication I want to check if the the user exists in a DB
(BlackList) and, if yes, put him in a specific VLAN. Made some research and the
Handler , , , seemed to be the solution but it doesn’t support attributes
that are queries to DB, am I correct?. Can you aid
On 04/09/2013 08:49 PM, Nuno Marques wrote:
After good authentication I want to check if the the user exists in a DB
(BlackList) and, if yes, put him in a specific VLAN. Made some research
and the Handler , , , seemed to be the solution but it doesn’t
support attributes that are queries to
On 11/15/2012 10:34 PM, Murat Bilal wrote:
I have three dıfferent groups and for TACACS authorization.My radius
.cfg is like that
Hello Murat,
you can have only one AddToReply line in an AuthBy. This is why you get
DEFAULT with the Access-Accept. Try removing all except one that adds
group3.
Sent: 16 Kasım 2012 Cuma 13:31
To: radiator@open.com.au
Subject: Re: [RADIATOR] AddToReply tacacsgroup
On 11/15/2012 10:34 PM, Murat Bilal wrote:
I have three dıfferent groups and for TACACS authorization.My radius
.cfg is like that
Hello Murat,
you can have only one AddToReply line
...@open.com.au] On
Behalf Of Heikki Vatiainen
Sent: 16 Kasım 2012 Cuma 13:31
To: radiator@open.com.au
Subject: Re: [RADIATOR] AddToReply tacacsgroup
On 11/15/2012 10:34 PM, Murat Bilal wrote:
I have three dıfferent groups and for TACACS authorization.My radius
.cfg is like that
Hello Murat
* command-access*
-Original Message-
From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On
Behalf Of Heikki Vatiainen
Sent: 16 Kasım 2012 Cuma 16:03
To: radiator@open.com.au
Subject: Re: [RADIATOR] AddToReply tacacsgroup
On 11/16/2012 01:56 PM, Murat Bilal wrote
Hi everyone
I have three dıfferent groups and for TACACS authorization.My radius .cfg is
like that
ServerTACACSPLUS
Key *
AddToRequest NAS-Identifier=TACACS
GroupMemberAttr tacacsgroup
AuthorizeGroup group1 permit service=shell cmd=show cmd-args=.*
Hi!
Thanks, it works!
One question for clarification, though. Is there AVP numbers conversion
Radiator- Diameter should work? In Radius AVP numbers are 255 (is it
correct?). But in my case I had to add Diameter values to the Radius
dictionary file. Like this:
VENDORATTR 13019
On 03/21/2012 10:02 AM, Arthur Konovalov wrote:
Thanks, it works!
Good to hear.
One question for clarification, though. Is there AVP numbers conversion
Radiator- Diameter should work? In Radius AVP numbers are 255 (is it
correct?). But in my case I had to add Diameter values to the Radius
On 03/19/2012 11:19 AM, Arthur Konovalov wrote:
Hello Arthur,
I'm using Radiator as Diameter frontend and I'm wondering is there
possible to use AddToReply clause with grouped attributes to the
Diameter peer?
This is possible now if you download the latest patches for 4.9. The
patches add
Hello Andrea -
If you want to add the attributes shown below for everyone that does
not have them set in their reply attributes (ie. only have the ones
that are different in the user records) you should do something like
this:
AuthBy SQL
.
in my SUBSCRIBERS table I have the following entry:
Username = ugo
Password =
Checkattr = (NULL)
ReplyAttr = 'Class = 3, Idle-Timeout = 600'
TimeLeft = (NULL)
WHERE am I supposed to see the replyattr? The access point is not doing
what is specified there and radpwtst doesn't show any
of the AuthLOG? The reason is that in our Radiator
(2.19),
%1 should print Request Denied but does not.
mahesh
-Original Message-
From: Hugh Irvine [mailto:[EMAIL PROTECTED]
Sent: Saturday, September 13, 2003 6:43 PM
To: Mahesh Neelakanta
Cc: [EMAIL PROTECTED]
Subject: Re: (RADIATOR
6:43 PM
To: Mahesh Neelakanta
Cc: [EMAIL PROTECTED]
Subject: Re: (RADIATOR) AddToReply Usage
Hello Mahesh -
You can use the RejectHasReason in your Realm or Handler clause.
See section 6.16.23 in the Radiator 3.6 reference manual
(doc/ref.html).
regards
Hugh
On Sunday, Sep 14, 2003, at 00
Hello from Sunny South Florida, USA,
I have a pretty simple question: We want to add the attribute
Reply-Message only when we reject a connection. For example if we have
a handler:
AuthBy GROUP
Identifier Test_Group
AuthByPolicy ContinueUntilReject
AuthBy Auth_1
AuthBy Radius_2
Hello Mahesh -
You can use the RejectHasReason in your Realm or Handler clause.
See section 6.16.23 in the Radiator 3.6 reference manual
(doc/ref.html).
regards
Hugh
On Sunday, Sep 14, 2003, at 00:27 Australia/Melbourne, Mahesh
Neelakanta wrote:
Hello from Sunny South Florida, USA,
I
I am attempting to use the AddToReply and StripFromReply on a per host
basis with SQLRADIUS and am not having much luck... Upon looking at the
source code and the archives it looks like it should work...
Here are the relevant pieces of my config, I am almost certain I am
doing it correctly.
Hello Miko -
No this won't work. As you have discovered, AddToReply and
StripFromReply will not work in a Host .. clause.
I think you will need to use a ReplyHook to manipulate the proxy reply.
You will find some example hooks in the file goodies/hooks.txt.
regards
Hugh
On Saturday, Apr 5,
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: (RADIATOR) AddToReply and Hosts
Hello Miko -
No this won't work. As you have discovered, AddToReply and
StripFromReply will not work in a Host .. clause.
I think you will need to use a ReplyHook to manipulate the proxy reply.
You will find
...
...
/Handler
Cheers,
Alexander
-Original Message-
From: Wim Biemolt [mailto:[EMAIL PROTECTED]]
Sent: zaterdag 24 augustus 2002 14:12
To: Hugh Irvine
Cc: [EMAIL PROTECTED]
Subject: Re: (RADIATOR) AddtoReply
So many e-mail. So little time. But ...
== From: Hugh Irvine
== From: [EMAIL PROTECTED]
If you don't like this behavior, you can specify your handlers like this:
Handler Realm=bogus-service, Request-Type=Access-Request
...
...
AddToRequest Attribute-Name = Attribut-Value
/Handler
Handler Realm=bogus-service,
...
-Miko
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of
[EMAIL PROTECTED]
Sent: Monday, August 26, 2002 8:25 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: (RADIATOR) AddtoReply
If you don't like this behavior, you can specify your
== From: [EMAIL PROTECTED]
The only downside to doing it this way is that it still adds the
attributes to access-reject reply packets, which inherantly does not
cause problems, except when dealing with larger networks, such as UUNet
which request that the only attributes passes back are
Hello Wim, Hello Miko -
Thanks Wim - I was going to write the same thing as you did.
The reason that AddToReply does what it does is because there are people
who do want to add attributes to both rejects and to accounting replies.
The manual is incorrect and has been fixed for the next
Anyone else having a problem with AddToReply where it adds the reply
attributes to Accounting replies as well???
Miko
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of
Hello miko,
Friday, August 2, 2002, 8:37:13 PM, you wrote:
myc Anyone else having a problem with AddToReply where it adds the reply
myc attributes to Accounting replies as well???
What version of radiator are you running? We're running the latest
v3.1 with patches here. I want to make
Hello Miko -
This is the expected behaviour - why is it a problem?
If you want to deal with accounting requests differently to
authentication requests, you can use Handlers:
# define Handlers
Handler Request-Type = Accounting-Request
.
/Handler
Handler
..
/Handler
Hello -
Please send me a copy of your configuration file (no secrets) together
with a trace 4 debug showing what is happening.
thanks
Hugh
On Saturday, August 3, 2002, at 09:40 AM, Wildph wrote:
Hello miko,
Friday, August 2, 2002, 8:37:13 PM, you wrote:
myc Anyone else having a
Hola Mariano, Hello Hugh,
== From: Hugh Irvine
Yes Mariano is correct in what is shown below.
Note that there may or may not be reply attributes in accounting responses.
Wim is right in saying that they are usually empty, but there are some
applications (usually proxy setups) that
Hi Wim -
I have copied Mike on this mail and the manual will be clarified for the next
release. Thanks for pointing out the inconsistency.
regards
Hugh
On Friday 19 October 2001 00:04, Wim Biemolt wrote:
Hola Mariano, Hello Hugh,
== From: Hugh Irvine
Yes Mariano is correct in what is
Hi,
I'm using the AddToReply(IfNotExist) command to add certain attributes.
Like a Framed-IP-Address to assign an IP-address if none was specified.
According to the reference manual (2.18.4) AddToReply Adds attributes
to Access-Accepts before replying to the originating client. However I
noticed
Hi Wim,
I guess your problem comes from doing accounting authentication in the same
AuthBy ... clause.
You should (correct me, Hugh if I'm wrong)
AuthBy WhatEver
Identifier auth-only
all the stuff related with authentication
including the AddToReply
/AuthBy WhatEver
AuthBy
Hello Wim, Hello Mariano -
Yes Mariano is correct in what is shown below.
Note that there may or may not be reply attributes in accounting responses.
Wim is right in saying that they are usually empty, but there are some
applications (usually proxy setups) that require reply attributes in
Hi again,
When I have set AddToReply with all the attributes that I need
everything works fine.
But when the same is set to AddToReplyIfNotExist then the user can not
surf the wed or even ping any address, am I missing something in the
latter way of adding to the reply.
best regards
===
Hello -
On Tuesday 16 October 2001 13:49, Tech wrote:
Hi again,
When I have set AddToReply with all the attributes that I need
everything works fine.
But when the same is set to AddToReplyIfNotExist then the user can not
surf the wed or even ping any address, am I missing something in the
-- Forwarded Message --
Subject: BOUNCE [EMAIL PROTECTED]:Non-member submission from [Tech
[EMAIL PROTECTED]]
Date: Wed, 3 Oct 2001 19:28:29 -0500
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
From [EMAIL PROTECTED] Wed Oct 3 19:28:28 2001
Received: from
Hello -
There are some example hooks in the file goodies/hooks.txt in the Radiator
distribution.
hth
Hugh
Below is a realm file this works ok but when I have tried to make this
AddToReply as part of a postauthHook as a addtoreplyifnotexit for all
default users but if user x,y,k then
Title: AddToReply SQL
Hi,
I want to add to all reply's Ascend-Maximum-Time= [ sessiontime value from table subscribers] attribute.
I want to create some accounts with limited time like 30 hours in one month and after 30 hours it will disconnect.
Then after every disconnect I'll update
Hello Lufti -
On Mon, 17 Jan 2000, Lutfi YUNUSOGLU wrote:
I want to add to all reply's " Ascend-Maximum-Time= [ sessiontime value from
table subscribers] " attribute.
I want to create some accounts with limited time like 30 hours in one month
and after 30 hours it will disconnect.
Then
Hi John,
On Jun 8, 8:40pm, [EMAIL PROTECTED] wrote:
Subject: (RADIATOR) AddToReply working?
Thanks Tom for the answer earlier, that did the trick.
On another topic, I'm not sure if all my AddToReply messages are
going out to the remote client. Here is what I have setup
40 matches
Mail list logo
