(RADIATOR) Configuration example neeed, SQL+NT Domain

2002-12-09 Thread Chris Epler
I'm looking at setting up Radiator for authentication for a Cisco 2600
series router for dialin access.  We would like to configure this so that
users are authenticated against the domain but before that check is done we
want to verify the username they provide is authorized for dialup, most
likely via a simple SQL table.  The reasoning is that we will need to
enable/disable dialin access on a per account basis and using the NT dialin
flag isn't an option.

How do I configure this multi-tier setup?  First checking username/flag in
the SQL database and if that is permitted then check the username/password
via the domain.

--
Chris A. Epler |   Voice: (302) 994-2521x7164
Delaware Park Racetrack and Slots  | FAX: (302) 633-2377
MIS: Systems - Network Engineer|


===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Configuration example neeed, SQL+NT Domain

2002-12-09 Thread Hugh Irvine

Hello Chris -

You would do something like this:

# define AuthBy clauses

AuthBy SQL
	Identifier CheckSQL
	.
/AuthBy

AuthBy NT
	Identifier CheckNT
	.
/AuthBy

# define Realms or Handlers

Handler 
	AuthByPolicy ContinueWhileAccept
	AuthBy CheckSQL
	AuthBy CheckNT
	..
/Handler

If you have any other questions, please don't hesitate to ask.

regards

Hugh


On Tuesday, Dec 10, 2002, at 03:23 Australia/Melbourne, Chris Epler 
wrote:

I'm looking at setting up Radiator for authentication for a Cisco 2600
series router for dialin access.  We would like to configure this so 
that
users are authenticated against the domain but before that check is 
done we
want to verify the username they provide is authorized for dialup, most
likely via a simple SQL table.  The reasoning is that we will need to
enable/disable dialin access on a per account basis and using the NT 
dialin
flag isn't an option.

How do I configure this multi-tier setup?  First checking 
username/flag in
the SQL database and if that is permitted then check the 
username/password
via the domain.

--
Chris A. Epler |   Voice: (302) 994-2521x7164
Delaware Park Racetrack and Slots  | FAX: (302) 633-2377
MIS: Systems - Network Engineer|


===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.