Re: (RADIATOR) AddToReply also in accounting?
Hola Mariano, Hello Hugh, == From: Hugh Irvine Yes Mariano is correct in what is shown below. Note that there may or may not be reply attributes in accounting responses. Wim is right in saying that they are usually empty, but there are some applications (usually proxy setups) that require reply attributes in accounting responses as well as in access accepts. As Wim points out, AddToReply(IfNotExist) can be used in both cases. And as Mariano shows below, Handlers can be used to deal with authentication and accounting separately. The solution of Mariano could work. But my greatest problem is that is see something which is not correct according to the reference manual. According to the reference manual AddToReply adds attributes *to Access-Accepts*. But as I understand it now this should be adds attributes to (all) replies. Just a minor detail. Cheers, -Wim -/- SURFnet === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) AddToReply also in accounting?
Hi Wim - I have copied Mike on this mail and the manual will be clarified for the next release. Thanks for pointing out the inconsistency. regards Hugh On Friday 19 October 2001 00:04, Wim Biemolt wrote: Hola Mariano, Hello Hugh, == From: Hugh Irvine Yes Mariano is correct in what is shown below. Note that there may or may not be reply attributes in accounting responses. Wim is right in saying that they are usually empty, but there are some applications (usually proxy setups) that require reply attributes in accounting responses as well as in access accepts. As Wim points out, AddToReply(IfNotExist) can be used in both cases. And as Mariano shows below, Handlers can be used to deal with authentication and accounting separately. The solution of Mariano could work. But my greatest problem is that is see something which is not correct according to the reference manual. According to the reference manual AddToReply adds attributes *to Access-Accepts*. But as I understand it now this should be adds attributes to (all) replies. Just a minor detail. Cheers, -Wim -/- SURFnet === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) AddToReply also in accounting?
Hi, I'm using the AddToReply(IfNotExist) command to add certain attributes. Like a Framed-IP-Address to assign an IP-address if none was specified. According to the reference manual (2.18.4) AddToReply Adds attributes to Access-Accepts before replying to the originating client. However I noticed that the AddToReply(IfNotExist) command also seem to affect the Accounting-Response: *** Sending to 10.20.30.40 port 1813 Code: Accounting-Response Identifier: 156 Authentic: R187230238!25181i10n.n}Y Attributes: Framed-IP-Address = 192.168.192.168 Although everything is working fine, I don't need this attribute in the Accounting-Response and according to the reference manual this isn't the correct behavior. Is this a bug? Cheers, -Wim -/- SURFnet === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) AddToReply also in accounting?
Hi Wim, I guess your problem comes from doing accounting authentication in the same AuthBy ... clause. You should (correct me, Hugh if I'm wrong) AuthBy WhatEver Identifier auth-only all the stuff related with authentication including the AddToReply /AuthBy WhatEver AuthBy WhatEver Identifier acct-only all the stuff related with accounting NOT including the AddToReply /AuthBy WhatEver Handler Request-Type=Access-Request AuthBy auth-only /Handler Handler Request-Type=Accounting-Request AuthBy acct-only /Handler El 17 Oct 2001, a las 17:55, Wim Biemolt escribió: Hi, I'm using the AddToReply(IfNotExist) command to add certain attributes. Like a Framed-IP-Address to assign an IP-address if none was specified. According to the reference manual (2.18.4) AddToReply Adds attributes to Access-Accepts before replying to the originating client. However I noticed that the AddToReply(IfNotExist) command also seem to affect the Accounting-Response: *** Sending to 10.20.30.40 port 1813 Code: Accounting-Response Identifier: 156 Authentic: R187230238!25181i10n.n}Y Attributes: Framed-IP-Address = 192.168.192.168 Although everything is working fine, I don't need this attribute in the Accounting-Response and according to the reference manual this isn't the correct behavior. Is this a bug? Cheers, -Wim -/- SURFnet === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. -- Mariano Absatz El Baby -- Computers are only human. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) AddToReply also in accounting?
Hello Wim, Hello Mariano - Yes Mariano is correct in what is shown below. Note that there may or may not be reply attributes in accounting responses. Wim is right in saying that they are usually empty, but there are some applications (usually proxy setups) that require reply attributes in accounting responses as well as in access accepts. As Wim points out, AddToReply(IfNotExist) can be used in both cases. And as Mariano shows below, Handlers can be used to deal with authentication and accounting separately. regards Hugh On Thursday 18 October 2001 06:54, Mariano Absatz wrote: Hi Wim, I guess your problem comes from doing accounting authentication in the same AuthBy ... clause. You should (correct me, Hugh if I'm wrong) AuthBy WhatEver Identifier auth-only all the stuff related with authentication including the AddToReply /AuthBy WhatEver AuthBy WhatEver Identifier acct-only all the stuff related with accounting NOT including the AddToReply /AuthBy WhatEver Handler Request-Type=Access-Request AuthBy auth-only /Handler Handler Request-Type=Accounting-Request AuthBy acct-only /Handler El 17 Oct 2001, a las 17:55, Wim Biemolt escribió: Hi, I'm using the AddToReply(IfNotExist) command to add certain attributes. Like a Framed-IP-Address to assign an IP-address if none was specified. According to the reference manual (2.18.4) AddToReply Adds attributes to Access-Accepts before replying to the originating client. However I noticed that the AddToReply(IfNotExist) command also seem to affect the Accounting-Response: *** Sending to 10.20.30.40 port 1813 Code: Accounting-Response Identifier: 156 Authentic: R187230238!25181i10n.n}Y Attributes: Framed-IP-Address = 192.168.192.168 Although everything is working fine, I don't need this attribute in the Accounting-Response and according to the reference manual this isn't the correct behavior. Is this a bug? Cheers, -Wim -/- SURFnet === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. -- Mariano Absatz El Baby -- Computers are only human. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
