Hello Griff -
Can you explain to me what a Service-Type = Call-Check is? And in what
circumstance your NAS generates it?
My reading of the RFC tells me that this should correspond to a
Pre-Authentication request that the NAS sends before answering the call,
and in which the Calling-Station-Id is sent as the User-Name. An
Access-Accept in reply should tell the NAS to answer the call.
Is this what you are trying to do?
thanks
Hugh
On Wednesday 25 July 2001 06:45, Griff Hamlin wrote:
Hello,
I'm trying to handle a situation where I need to perform an
authorization for a service-type of 'call-check'. What I want to do is,
look in a mysql table and if I find a row matching the combination of
username, nas-ipaddress then I want the router to accept the call and
perform a normal authentication. If I don't find the row then I want it
to be rejected. I would have a handler like the following:
Handler Service-Type=call-check
AuthBySQL
IgnoreAccounting
# appropriate DBSource and DBAuth parameters
AuthSelect select something that eludes me
/AuthBy
/Handler
I'm afraid I don't have the slightest idea what to put in there. It's
not clear to me if I need to add another field to my database that
contains an Auth-Type of some sort, but I don't know what that should be
in the event that I just want the NAS to accept the call and do a normal
authentication, not just redirect to some AuthBy named by an identifier.
I also don't know how to tell it to set the Auth-Type to reject in the
event that no rows are returned. Any help is appreciated.
Griff Hamlin, III
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
