Re[2]: User Response.
Dear Nick Marino, Microsoft returns result code in MS-CHAP-Error attribute. Partially it's implemented in FreeRADIUS. You can add it to RADIUS reply. Attribute is described in RFC2548 and RFC2433. Complete list of error codes can be locatedinQ163111articleofMicrosoft Knowlege Base (http://support.microsoft.com/default.aspx?scid=kb;en-us;Q163111). For example value of "E=646 R=0" means you deny user's logon because of logon hours restrictions. --Thursday, October 3, 2002, 1:49:09 PM, you wrote to [EMAIL PROTECTED]: NM> Well Microsoft sucks.. NM> -Original Message- NM> From: [EMAIL PROTECTED] NM> [mailto:[EMAIL PROTECTED]] On Behalf Of Kostas NM> Kalevras NM> Sent: Thursday, October 03, 2002 4:34 AM NM> To: [EMAIL PROTECTED] NM> Subject: Re: User Response. NM> On Wed, 2 Oct 2002, Nick Marino wrote: >> I was curious is there a way for the disconnect reason to be displayed >> on a users machine when they are rejected from radius. >> >> Like normally if you dial in out side your allowed time limit dialup >> networking just responds with the message that you had an invalid user >> name or password. >> >> I found something in the documentation for my NAS one time where you >> would change a setting so that would not happen and the user would >> receive the reply that the radius sent and not the generic bad NM> username >> or password message. Although I can not locate it now. >> >> >> Anyone know how to do this or is it possible? NM> The RADIUS RFC defines the Reply-Message attribute. This is used by the NM> counter NM> and other modules to send back useful messages to the user. Microsoft's NM> PPP NM> implementation does not support it though so there isn't much you can NM> do. NM> -- NM> Kostas Kalevras Network Operations Center NM> [EMAIL PROTECTED] National Technical University of Athens, Greece NM> Work Phone: +30 210 7721861 NM> 'Go back to the shadow' Gandalf NM> - NM> List info/subscribe/unsubscribe? See NM> http://www.freeradius.org/list/users.html NM> --- NM> Incoming mail is certified Virus Free. NM> Checked by AVG anti-virus system (http://www.grisoft.com). NM> Version: 6.0.393 / Virus Database: 223 - Release Date: 9/30/2002 NM> --- NM> Outgoing mail is certified Virus Free. NM> Checked by AVG anti-virus system (http://www.grisoft.com). NM> Version: 6.0.393 / Virus Database: 223 - Release Date: 9/30/2002 NM> - NM> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- ~/ZARAZA Ñóùåñòâóþ ëèøü ÿ ñàì, íèêóäà íå ëåòÿ. (Ëåì) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: User Response.
Well Microsoft sucks.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kostas Kalevras Sent: Thursday, October 03, 2002 4:34 AM To: [EMAIL PROTECTED] Subject: Re: User Response. On Wed, 2 Oct 2002, Nick Marino wrote: > I was curious is there a way for the disconnect reason to be displayed > on a users machine when they are rejected from radius. > > Like normally if you dial in out side your allowed time limit dialup > networking just responds with the message that you had an invalid user > name or password. > > I found something in the documentation for my NAS one time where you > would change a setting so that would not happen and the user would > receive the reply that the radius sent and not the generic bad username > or password message. Although I can not locate it now. > > > Anyone know how to do this or is it possible? The RADIUS RFC defines the Reply-Message attribute. This is used by the counter and other modules to send back useful messages to the user. Microsoft's PPP implementation does not support it though so there isn't much you can do. -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.393 / Virus Database: 223 - Release Date: 9/30/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.393 / Virus Database: 223 - Release Date: 9/30/2002 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: User Response.
On Wed, 2 Oct 2002, Nick Marino wrote: > I was curious is there a way for the disconnect reason to be displayed > on a users machine when they are rejected from radius. > > Like normally if you dial in out side your allowed time limit dialup > networking just responds with the message that you had an invalid user > name or password. > > I found something in the documentation for my NAS one time where you > would change a setting so that would not happen and the user would > receive the reply that the radius sent and not the generic bad username > or password message. Although I can not locate it now. > > > Anyone know how to do this or is it possible? The RADIUS RFC defines the Reply-Message attribute. This is used by the counter and other modules to send back useful messages to the user. Microsoft's PPP implementation does not support it though so there isn't much you can do. -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
User Response.
I was curious is there a way for the disconnect reason to be displayed on a users machine when they are rejected from radius. Like normally if you dial in out side your allowed time limit dialup networking just responds with the message that you had an invalid user name or password. I found something in the documentation for my NAS one time where you would change a setting so that would not happen and the user would receive the reply that the radius sent and not the generic bad username or password message. Although I can not locate it now. Anyone know how to do this or is it possible? --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.389 / Virus Database: 220 - Release Date: 9/16/2002 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
