Re: (RADIATOR) AddToReply also in accounting?

2001-10-18 Thread Hugh Irvine


Hi Wim -

I have copied Mike on this mail and the manual will be clarified for the next 
release. Thanks for pointing out the inconsistency.

regards

Hugh


On Friday 19 October 2001 00:04, Wim Biemolt wrote:
> Hola Mariano, Hello Hugh,
>
> ==> From: Hugh Irvine
>
> > Yes Mariano is correct in what is shown below.
> >
> > Note that there may or may not be reply attributes in accounting
> > responses.
> >
> > Wim is right in saying that they are usually empty, but there are some
> > applications (usually proxy setups) that require reply attributes in
> > accounting responses as well as in access accepts. As Wim points out,
> > AddToReply(IfNotExist) can be used in both cases. And as Mariano shows
> > below, Handlers can be used to deal with authentication and accounting
> > separately.
>
> The solution of Mariano could work. But my greatest problem is that is see
> something which is not correct according to the reference manual. According
> to the reference manual AddToReply adds attributes *to Access-Accepts*. But
> as I understand it now this should be "adds attributes to (all) replies".
> Just a minor detail.
>
> Cheers,
>
> -Wim -/- SURFnet
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) AddToReply also in accounting?

2001-10-18 Thread Wim Biemolt

Hola Mariano, Hello Hugh,

==> From: Hugh Irvine

> Yes Mariano is correct in what is shown below.
> 
> Note that there may or may not be reply attributes in accounting responses.
> 
> Wim is right in saying that they are usually empty, but there are some 
> applications (usually proxy setups) that require reply attributes in 
> accounting responses as well as in access accepts. As Wim points out, 
> AddToReply(IfNotExist) can be used in both cases. And as Mariano shows below,
> Handlers can be used to deal with authentication and accounting separately.

The solution of Mariano could work. But my greatest problem is that is see
something which is not correct according to the reference manual. According
to the reference manual AddToReply adds attributes *to Access-Accepts*. But
as I understand it now this should be "adds attributes to (all) replies".
Just a minor detail.

Cheers,

-Wim -/- SURFnet

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) AddToReply also in accounting?

2001-10-17 Thread Hugh Irvine


Hello Wim, Hello Mariano -

Yes Mariano is correct in what is shown below.

Note that there may or may not be reply attributes in accounting responses.

Wim is right in saying that they are usually empty, but there are some 
applications (usually proxy setups) that require reply attributes in 
accounting responses as well as in access accepts. As Wim points out, 
AddToReply(IfNotExist) can be used in both cases. And as Mariano shows below, 
Handlers can be used to deal with authentication and accounting separately.

regards

Hugh


On Thursday 18 October 2001 06:54, Mariano Absatz wrote:
> Hi Wim,
>
> I guess your problem comes from doing accounting & authentication in the
> same  clause.
>
> You should (correct me, Hugh if I'm wrong)
>
> 
>Identifier auth-only
>
>"all the stuff related with authentication
>including the AddToReply"
> 
>
> 
>Identifier acct-only
>
>"all the stuff related with accounting
>NOT including the AddToReply"
> 
>
> 
>   AuthBy auth-only
> 
>
> 
>   AuthBy acct-only
> 
>
> El 17 Oct 2001, a las 17:55, Wim Biemolt escribió:
> > Hi,
> >
> > I'm using the AddToReply(IfNotExist) command to add certain attributes.
> > Like a Framed-IP-Address to assign an IP-address if none was specified.
> > According to the reference manual (2.18.4) AddToReply "Adds attributes
> > to Access-Accepts before replying to the originating client". However I
> > noticed that the AddToReply(IfNotExist) command also seem to affect the
> > Accounting-Response:
> >
> >*** Sending to 10.20.30.40 port 1813 
> >Code:   Accounting-Response
> >Identifier: 156
> >Authentic:  R<187><230>"<238>!<25><<181>i<10>n.n}Y
> >Attributes:
> >Framed-IP-Address = 192.168.192.168
> >
> > Although everything is working fine, I don't need this attribute in the
> > Accounting-Response and according to the reference manual this isn't
> > the correct behavior. Is this a bug?
> >
> > Cheers,
> >
> > -Wim -/- SURFnet
> >
> > ===
> > Archive at http://www.open.com.au/archives/radiator/
> > Announcements on [EMAIL PROTECTED]
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
>
> --
> Mariano Absatz
> El Baby
> --
> Computers are only human.
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) AddToReply also in accounting?

2001-10-17 Thread Mariano Absatz

Hi Wim,

I guess your problem comes from doing accounting & authentication in the same 
 clause.

You should (correct me, Hugh if I'm wrong)


   Identifier auth-only
   
   "all the stuff related with authentication
   including the AddToReply"



   Identifier acct-only
   
   "all the stuff related with accounting
   NOT including the AddToReply"



  AuthBy auth-only



  AuthBy acct-only




El 17 Oct 2001, a las 17:55, Wim Biemolt escribió:

> Hi,
> 
> I'm using the AddToReply(IfNotExist) command to add certain attributes.
> Like a Framed-IP-Address to assign an IP-address if none was specified.
> According to the reference manual (2.18.4) AddToReply "Adds attributes
> to Access-Accepts before replying to the originating client". However I
> noticed that the AddToReply(IfNotExist) command also seem to affect the
> Accounting-Response:
> 
>*** Sending to 10.20.30.40 port 1813 
>Code:   Accounting-Response
>Identifier: 156
>Authentic:  R<187><230>"<238>!<25><<181>i<10>n.n}Y
>Attributes:
>Framed-IP-Address = 192.168.192.168
> 
> Although everything is working fine, I don't need this attribute in the
> Accounting-Response and according to the reference manual this isn't
> the correct behavior. Is this a bug?
> 
> Cheers,
> 
> -Wim -/- SURFnet
> 
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.


--
Mariano Absatz
El Baby
--
Computers are only human. 

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.