(RADIATOR) Authentication to one DB, Accounting to another

2003-09-26 Thread Derek Buttineau
Just want to make sure I'm not totally out in left field on how to 
accomplish this, I thought I'd ask.  We just recently setup MySQL 
Replication.. and I'd like to make our Radiator software use the master 
and slaves for authentication (just using DNS round robin atm).. but 
since only the master can receive updates, I'd like to make sure the 
accounting packets only go to the master.

I'm thinking I need to make the configuration look like this, but please 
let me know if I'm totally off base:

   AuthByPolicy ContinueAlways

   AuthBy SQL
   DBSourcedbi:mysql:radius:Slave Hostname
   DBUsernameusername
   DBAuthpassword
   # Setup Authentication
   AuthSelectselect ENCRYPTEDPASSWORD, REPLYATTR from 
AUTHENTICATIONTABLE where USERNAME='%U'
   AuthColumnDef0, Encrypted-Password, check
   AuthColumnDef1, GENERIC, reply

   # Disable Accounting
   AccountingTable
   /AuthBy
   AuthBy SQL
   DBSourcedbi:mysql:radius:Master Database
   DBUsernameradius
   DBAuthcsrox
   # Disable Authentication
   AuthSelect
   # Setup Accounting
   AccountingTable ACCOUNTINGTABLE
   AcctColumnDef   USERNAME,User-Name
   AcctColumnDef   TIME_STAMP,Timestamp,formatted-date,'%Y%m%d 
%H:%M:%S'
   AcctColumnDef   ACCTSTATUSTYPE,Acct-Status-Type
   AcctColumnDef   ACCTDELAYTIME,Acct-Delay-Time,integer
   AcctColumnDef   ACCTINPUTOCTETS,Acct-Input-Octets,integer
   AcctColumnDef   ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
   AcctColumnDef   ACCTSESSIONID,Acct-Session-Id
   AcctColumnDef   ACCTSESSIONTIME,Acct-Session-Time,integer
   AcctColumnDef   ACCTTERMINATECAUSE,Acct-Terminate-Cause
   AcctColumnDef   NASIDENTIFIER,NAS-IP-Address
   AcctColumnDef   NASPORT,NAS-Port,integer
   AcctColumnDef   FRAMEDIPADDRESS,Framed-IP-Address
   AcctColumnDef   CONNECTSPEED,Connect-Speed
   /AuthBy

Thanks a bunch in advance.  Sorry if this has already been covered on 
the list, took a look but perhaps my search techniques are in need of 
improvement :)

--
Regards,
Derek Buttineau
Internet Systems Administrator
Compu-SOLVE Internet Services
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.


RE: (RADIATOR) Authentication to one DB, Accounting to another

2003-09-26 Thread Frank Danielson
The only catch is that AuthBy SQL will open a connection to the database
when it starts up and keep that connection up unless there is a problem with
it so your round robin DNS will not do much. AuthBY SQL supports declaring a
database to use as a backup which may be a better scheme for reliability. If
you are looking to load balance among your databases I would run a Radiator
instance for each database instance and then proxy requests to them using a
main instance with AuthBy ROUNDROBIN or AuthBy LOADBALANCE.

-Frank

-Original Message-
From: Derek Buttineau [mailto:[EMAIL PROTECTED]
Sent: Friday, September 26, 2003 6:20 AM
To: [EMAIL PROTECTED]
Subject: (RADIATOR) Authentication to one DB, Accounting to another


Just want to make sure I'm not totally out in left field on how to 
accomplish this, I thought I'd ask.  We just recently setup MySQL 
Replication.. and I'd like to make our Radiator software use the master 
and slaves for authentication (just using DNS round robin atm).. but 
since only the master can receive updates, I'd like to make sure the 
accounting packets only go to the master.

I'm thinking I need to make the configuration look like this, but please 
let me know if I'm totally off base:

AuthByPolicy ContinueAlways

AuthBy SQL
DBSourcedbi:mysql:radius:Slave Hostname
DBUsernameusername
DBAuthpassword

# Setup Authentication
AuthSelectselect ENCRYPTEDPASSWORD, REPLYATTR from 
AUTHENTICATIONTABLE where USERNAME='%U'
AuthColumnDef0, Encrypted-Password, check
AuthColumnDef1, GENERIC, reply

# Disable Accounting
AccountingTable
/AuthBy

AuthBy SQL
DBSourcedbi:mysql:radius:Master Database
DBUsernameradius
DBAuthcsrox

# Disable Authentication
AuthSelect

# Setup Accounting
AccountingTable ACCOUNTINGTABLE
AcctColumnDef   USERNAME,User-Name
AcctColumnDef   TIME_STAMP,Timestamp,formatted-date,'%Y%m%d 
%H:%M:%S'
AcctColumnDef   ACCTSTATUSTYPE,Acct-Status-Type
AcctColumnDef   ACCTDELAYTIME,Acct-Delay-Time,integer
AcctColumnDef   ACCTINPUTOCTETS,Acct-Input-Octets,integer
AcctColumnDef   ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
AcctColumnDef   ACCTSESSIONID,Acct-Session-Id
AcctColumnDef   ACCTSESSIONTIME,Acct-Session-Time,integer
AcctColumnDef   ACCTTERMINATECAUSE,Acct-Terminate-Cause
AcctColumnDef   NASIDENTIFIER,NAS-IP-Address
AcctColumnDef   NASPORT,NAS-Port,integer
AcctColumnDef   FRAMEDIPADDRESS,Framed-IP-Address
AcctColumnDef   CONNECTSPEED,Connect-Speed
/AuthBy

Thanks a bunch in advance.  Sorry if this has already been covered on 
the list, took a look but perhaps my search techniques are in need of 
improvement :)

-- 
Regards,

Derek Buttineau
Internet Systems Administrator
Compu-SOLVE Internet Services


===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.