Hello Andrea -


If you want to add the attributes shown below for everyone that does not have them set in their reply attributes (ie. only have the ones that are different in the user records) you should do something like this:

        <AuthBy SQL>
                .....
                AddToReplyIfNotExist Class = 3, Idle-Timeout = 600
                ....
        </AuthBy>

I see from your other mail that you have already learned how to change the AuthSelect statement.

regards

Hugh


On Friday, Oct 10, 2003, at 11:36 Australia/Melbourne, Andrea Brancatelli wrote:



in my SUBSCRIBERS table I have the following entry:


Username = ugo
Password = ....
Checkattr = (NULL)
ReplyAttr = 'Class = 3, Idle-Timeout = 600'
TimeLeft = (NULL)

WHERE am I supposed to see the replyattr? The access point is not doing what is specified there and radpwtst doesn't show any reply attribute as well. what's wrong?

I have to send "Class = 3, Idle-Timeout = 600" to almost anyone. How do I do that? The best solution would be a per-user granularity (so the SUBSCRIBERS table fits) but it doesn't seem to work.

Any suggestion?

here's radpwtst output:


Reading dictionary file '/etc/radiator/dictionary'
sending Access-Request...
Packet dump:
*** Sending to 127.0.0.1 port 1645 ....
Code:       Access-Request
Identifier: 161
Authentic:  1234567890123456
Attributes:
        User-Name = "ugo"
        Service-Type = Framed-User
        NAS-IP-Address = 203.63.154.1
        NAS-Port = 1234
        Called-Station-Id = "123456789"
        Calling-Station-Id = "987654321"
        NAS-Port-Type = Async
        User-Password = "<145>g<172><177><131><203><179>k<178>1<195>]<152><25>7<136>"


Packet dump:
*** Received from 127.0.0.1 port 1645 ....
Code:       Access-Accept
Identifier: 161
Authentic:  <132>|<244>c<P<177><160><148><17><28><28>kxD<144>
Attributes:

OK
sending Accounting-Request Start...
Packet dump:
*** Sending to 127.0.0.1 port 1646 ....
Code:       Accounting-Request
Identifier: 162
Authentic:  <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
Attributes:
        User-Name = "ugo"
        Service-Type = Framed-User
        NAS-IP-Address = 203.63.154.1
        NAS-Port = 1234
        NAS-Port-Type = Async
        Acct-Session-Id = "00001234"
        Acct-Status-Type = Start
        Called-Station-Id = "123456789"
        Calling-Station-Id = "987654321"
        Acct-Delay-Time = 0

Packet dump:
*** Received from 127.0.0.1 port 1646 ....
Code:       Accounting-Response
Identifier: 162
Authentic:  -<203>Fc<170>z~f<169><19><233><139><223><231>8<225>
Attributes:

OK
sending Accounting-Request Stop...
Packet dump:
*** Sending to 127.0.0.1 port 1646 ....
Code:       Accounting-Request
Identifier: 163
Authentic:  <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
Attributes:
        User-Name = "ugo"
        Service-Type = Framed-User
        NAS-IP-Address = 203.63.154.1
        NAS-Port = 1234
        NAS-Port-Type = Async
        Acct-Session-Id = "00001234"
        Acct-Status-Type = Stop
        Called-Station-Id = "123456789"
        Calling-Station-Id = "987654321"
        Acct-Delay-Time = 0
        Acct-Session-Time = 1000
        Acct-Input-Octets = 20000
        Acct-Output-Octets = 30000

Packet dump:
*** Received from 127.0.0.1 port 1646 ....
Code:       Accounting-Response
Identifier: 163
Authentic:  <248>a<136>X<242><233><202><174><164>v<152><194><218><22>A<8>
Attributes:


OK



NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening?

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to