Re: Authorization in RADIUS, Authorization in freeradius

2007-09-04 Thread Guy Fraser
On Sun, 2007-09-02 at 15:36 +0100, George Beitis wrote: > Hi everyone, > I have a general question regarding Authorization in the RADIUS protocol > and how it is implemented in freeradius. What does the RADIUS protocol > refer to when it talks about Authorization, does it actually refer to > users

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-03 Thread Artur Hecker
Hi George I guess it is more a question of definition of the scope of the authorization and authentication than of the actual mechanisms. I would invite you to read the RADIUS RFCs since your conclusions sound a little bit hasty. In RADIUS and in freeradius in particular the authenticati

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread Doug Hardie
On Sep 2, 2007, at 08:52, George Beitis wrote: Do you know of any products that can be used with freeradius to provide such authorization facilities? Using perhaps policies? I have a number of authorization policies implemented using FreeRadius. I have a module that implements those poli

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread Alan DeKok
George Beitis wrote: >>> FreeRADIUS *does* implement policies which provide authorization >>> facilities. > > Does this mean that you could actually write policies inside of freeradius? Not "could", but "can". People do it all of the time. Best estimates are nearing 100K installations, and

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread Arran Cudbard-Bell
Alan DeKok wrote: George Beitis wrote: thank you for your reply. I am writing up a part of my dissertation and I 'm referring to freeradius and the RADIUS protocol trying to explain how it works. By accident, mostly. Like many practical systems, it was built to do something first,

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread George Beitis
Hey Alan >> FreeRADIUS *does* implement policies which provide authorization facilities. Does this mean that you could actually write policies inside of freeradius? regards George Alan DeKok wrote: > George Beitis wrote: > >> thank you for your reply. I am writing up a part of my dissertat

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread Alan DeKok
George Beitis wrote: > thank you for your reply. I am writing up a part of my dissertation and > I 'm referring to freeradius and the RADIUS protocol trying to explain > how it works. By accident, mostly. Like many practical systems, it was built to do something first, and to have theoretical

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread George Beitis
Hey there thanks for the reply, do you know how they do it though? Is it just perl scripts that help make a decision? Or do they use authorization engines of some sort that support policies? George [EMAIL PROTECTED] wrote: > Hi, > > >> in other words authentication and authorization become

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread A . L . M . Buxey
Hi, > in other words authentication and authorization become one the same. Do > you know of any products that can be used with freeradius to provide > such authorization facilities? Using perhaps policies? a LOT of people on this list use policies with authorization. be that a trivial one such

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread George Beitis
Hey Alan, thank you for your reply. I am writing up a part of my dissertation and I 'm referring to freeradius and the RADIUS protocol trying to explain how it works. From my research most people who use RADIUS for authentication purposes. Noone gives a clear image of whether or not they use it

Re: Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread Alan DeKok
George Beitis wrote: > I have a general question regarding Authorization in the RADIUS protocol > and how it is implemented in freeradius. What does the RADIUS protocol > refer to when it talks about Authorization, does it actually refer to > users being probably authorized after being authenticat

Authorization in RADIUS, Authorization in freeradius

2007-09-02 Thread George Beitis
Hi everyone, I have a general question regarding Authorization in the RADIUS protocol and how it is implemented in freeradius. What does the RADIUS protocol refer to when it talks about Authorization, does it actually refer to users being probably authorized after being authenticated, using the pr