After making changes to match on Client-Id instead of Nas-IP-Address, I
don't seem to be able to make any matches whether I do exact matches or a
regex. Trace 4 dump:
Exact match:
Thu Oct 28 08:34:58 1999: DEBUG: Packet dump:
*** Received from 111.111.112.20 port 1112 ....
Code: Access-Request
Identifier: 203
Authentic: 1234567890123456
Attributes:
User-Name = "aholtz"
Service-Type = Framed-User
NAS-IP-Address = 111.111.112.20
NAS-Port = 1234
NAS-Port-Type = Async
Password =
"<164>j<196><236>p<150><219><139>P{<156><237><156><187><234><229>"
Thu Oct 28 08:34:58 1999: DEBUG: Check if Handler Client-Id=111.111.112.20
should be used to handle this request
Thu Oct 28 08:34:58 1999: DEBUG: Check if Handler Realm="",
User-Name=/^[a-z0-9\-\.]+$/ should be used to handle this request
Thu Oct 28 08:34:58 1999: DEBUG: Handling request with Handler 'Realm="",
User-Name=/^[a-z0-9\-\.]+$/'
Config entry:
<Handler Client-Id=111.111.112.20>
......
</Handler>
Regex Match:
Thu Oct 28 08:35:52 1999: DEBUG: Packet dump:
*** Received from 111.111.112.20 port 1112 ....
Code: Access-Request
Identifier: 204
Authentic: 1234567890123456
Attributes:
User-Name = "aholtz"
Service-Type = Framed-User
NAS-IP-Address = 111.111.112.20
NAS-Port = 1234
NAS-Port-Type = Async
Password =
"<164>j<196><236>p<150><219><139>P{<156><237><156><187><234><229>"
Thu Oct 28 08:35:52 1999: DEBUG: Check if Handler
Client-Id=/111.111.112.(19|20)/ should be used to handle this request
Thu Oct 28 08:35:52 1999: DEBUG: Check if Handler Realm="",
User-Name=/^[a-z0-9\-\.]+$/ should be used to handle this request
Thu Oct 28 08:35:52 1999: DEBUG: Handling request with Handler 'Realm="",
User-Name=/^[a-z0-9\-\.]+$/'
Config file:
<Handler Client-Id=/111.111.112.(19|20)/>
.....
</Handler>
All of these tests are done via radpwtst and have been confirmed when
dialing into nas units that should make the matches on Handlers that
match their Client-Id.
--------------------------------------------------------------------------
Aaron Holtz
ComNet Inc.
UNIX Systems Administration/Network Operations
"It's not broken, it just lacks duct tape."
--------------------------------------------------------------------------
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
