(RADIATOR) Using RADIUS as authentication provider for WIN2K RRAS

2001-10-01 Thread Alireza Veiseh
Does anybody know how to setup Routhing and Remote Access (RRAS) of WIN2k to use the radiator as the authentication provider? Do I need to edit the registory to add the raditor as a new service first? Here is what I have done, but it doesn't work: 1. Opened the property window of the RRAS 2.

Re: (RADIATOR) Multiple Clients

2001-10-01 Thread Hugh Irvine
Hello Shane - On Tuesday 02 October 2001 16:51, Shane Malden wrote: > > We are looking at purchasing a copy of Radiator but I was just after some > opinion on it?? Also one of our Main features was to Proxy the Requests off > to another Radius Product (RSA ACE/Server) and have Radiator reply wi

(RADIATOR) Multiple Clients

2001-10-01 Thread Shane Malden
We are looking at purchasing a copy of Radiator but I was just after some opinion on it?? Also one of our Main features was to Proxy the Requests off to another Radius Product (RSA ACE/Server) and have Radiator reply with the IP and correct details. As we have two Network clients that reques

Re: (RADIATOR) Attibute Value Pair for Priv_lvl

2001-10-01 Thread Hugh Irvine
Hello Amy - This doesn't really have a radius equivalent (as far as I know), however there are lots of things that you can do with Cisco's using the "cisco-avpair ..." construct, so you should check with Cisco what is possible. You should also be aware that there are *major* differences in ra

Re: (RADIATOR) MAXSESSIONTIME

2001-10-01 Thread Hugh Irvine
Hello Jesus - On Tuesday 02 October 2001 10:25, Jesus Duarte wrote: > Hello > > I want to set a MAXSESSIONTIME for all users. Can I do that with the > config file with an AddToReply statement instead of adding that field to > all user accounts? If so, what is the syntax? > # define AuthBy

(RADIATOR) Attibute Value Pair for Priv_lvl

2001-10-01 Thread Amy Stratton
Hiya, I'm curious if anyone can tell me what the Attribute Priv_lvl in tacacs+ translates to for Radius or if its possible. This is for Cisco Routers/Switches. I've looked in the dictionary file and the dictionary.cisco file. I've just started looking on cisco's page, but I figured I should chec

(RADIATOR) MAXSESSIONTIME

2001-10-01 Thread Jesus Duarte
Hello I want to set a MAXSESSIONTIME for all users. Can I do that with the config file with an AddToReply statement instead of adding that field to all user accounts? If so, what is the syntax? Der Hausmeister ~~JESUS ~~ Jesus Duarte UNIX System Administrator (geek) IPNS/CNNW

Re: (RADIATOR) PORTLIMITCHECK problem

2001-10-01 Thread Hugh Irvine
Hello Kevin - This seems quite strange - can you please send me a copy of the configuration file (no secrets) together with a trace 4 debug showing what is happening? BTW - the latest version of Radiator is 2.18.4. thanks Hugh On Tuesday 02 October 2001 07:33, Kevin McKee wrote: > When I t

Re: (RADIATOR) Radiator NAT problem

2001-10-01 Thread Hugh Irvine
Hello George - You can use the "OutPort nnn" parameter in the AuthBy RADIUS clause to force the use of a particular port number. This parameter is supported in Radiator 2.18.1 and later - note that the current version is Radiator 2.18.4. regards Hugh On Tuesday 02 October 2001 01:14, PANAG

Re: (RADIATOR) prerequisite Digest::MD5 2.12 not found

2001-10-01 Thread Hugh Irvine
Hello Alireza - The latest version of Radiator is 2.18.4 - you should use that. Please let me know if you still have problems, and send me the complete transcript of the steps you have followed. thanks Hugh On Tuesday 02 October 2001 05:16, Alireza Veiseh wrote: > > I just downloaded the

Re: (RADIATOR) Efficiency

2001-10-01 Thread Hugh Irvine
Hello Jaime - The first example that you show below is incorrect and not supported. The second example is correct. regards Hugh On Monday 01 October 2001 22:08, Jaime Elizaga Jr. wrote: > > Hello everyone, > > I just need some inputs on which config would provide a more efficient > running

Re: (RADIATOR) AuthByPolicy question

2001-10-01 Thread Hugh Irvine
Hello Toni - You have discovered the reason for the existence of the AuthBy GROUP clause. Ie. you cannot change an AuthByPolicy part way through a list of AuthBy clauses, so you need different lists. So here is what to do: Identifier Auth-SQL ... Account

Re: (RADIATOR) PreClientHook

2001-10-01 Thread Hugh Irvine
Hello Michael - I don't think that a PreClientHook is the right way to go about this. If you are going to keep the number matrix in a database, it is probably easiest to just use two AuthBy SQL clauses - the first one to check the numbers and the second one to check the users. hth Hugh On

Re: (RADIATOR) Check callingstationid

2001-10-01 Thread Hugh Irvine
Hello Anton - This should be quite easy to do with an AuthBy PORTLIMITCHECK clause (together with a SessionDatabase SQL). Have a look at section 6.41 in the Radiator 2.18.4 reference manual. regards Hugh On Tuesday 02 October 2001 03:55, Anton Krall wrote: > > Guys. > > I just enabled a s

(RADIATOR) PORTLIMITCHECK problem

2001-10-01 Thread Kevin McKee
When I try to implement PORTLIMITCHECK (see following handler), I get lots of people authorized with the 'Called-Station-ID' value replacing their Username in the Session Database. Removing the AuthBy PORTLIMITCHECK seems to resolve the problem. I'm running 2.17.1. But, I really need to get POR

(RADIATOR) prerequisite Digest::MD5 2.12 not found

2001-10-01 Thread Alireza Veiseh
Title: Message I just downloaded the evaluation version of RADIATOR  version 2.18 and followed the installation on Win2K. When I perform "perl Makefile.PL" in  radiator directory, i get the following warning message:   Warning: prerequisite Digest::MD5 2.12 not found at E:/Perl/lib/ExtUtils/

(RADIATOR) Check callingstationid

2001-10-01 Thread Anton Krall
Title: Message Guys.   I just enabled a service where some users can dial into a certain telephone number thats dedicated only to them...   So user [EMAIL PROTECTED] can dial into phone 555- but only that user should be able to dial into that number, everybody else thats tries to log in

(RADIATOR) Radiator NAT problem

2001-10-01 Thread PANAGOPOULOU,GEORGIA (HP-Greece,ex1)
Hello all, Here is a problem we encounter with our firewall configuration: Radiator server (outside firewall) talking to Radiator server (inside firewall)(version 2.18) The Radiator server outside the firewall changes it's source port every minute or so. Multiple different requests are sent to t

(RADIATOR) DNIS Group, Emerald Platypus Config

2001-10-01 Thread Leigh Spiegel
Hello, I've just been trying out the DNIS Group feature. If no DNIS group is set to an account type profile access is rejected. Is there any way to change this, I want to honourDNIS on certain accounts however allow other account types to get in no matter what DNIS number. Or is there an DNIS

(RADIATOR) Efficiency

2001-10-01 Thread Jaime Elizaga Jr.
Hello everyone,   I just need some inputs on which config would provide a more efficient running radiator at high loads.   Thanks,   Jaime   CONFIG 1:       Identifier FIRST         Identifier SECOND     Identifier DEFAULT               AuthBy FIRST                 AuthBy

(RADIATOR) PreClientHook

2001-10-01 Thread Michael
Hi all, I am trying to work out how to use the PreClientHook to check that the customer is dialling the correct number, the idea being to prevent them accidentally dialling the wrong number and incurring hefty call charges. here is what I am thinking of (I know bugger all about Perl). #Perl Sc

Re: (RADIATOR) Unix Passwords

2001-10-01 Thread Hugh Irvine
Hello Ricky - I don't quite understand your question, sorry. If you want to use the shadow file, you can either use an AuthBy UNIX clause and point it at the shadow file directly, or you can use an AuthBy SYSTEM (possibly with the UseGetspnamf parameter). Have a look at sections 6.25 and 6.3

(RADIATOR) AuthByPolicy question

2001-10-01 Thread Toni Riekkinen
I have the following situation: Identifier Auth-SQL ... AccountingTable Identifier Acct-SQL ... AuthSelect Identifier Auth-File ... ... AuthByPolicyContinue

Re: (RADIATOR) radiator agains Radiator-2.16.1

2001-10-01 Thread Hugh Irvine
Hello Christian - Radiator simply records whatever was sent in the radius accounting packets. Have a look at a trace 4 debug (or even a trace 5 hex dump) to see what Radiator receives (you can also look at a tcpdump to see what is on the wire). regards Hugh On Monday 01 October 2001 17:38,

(RADIATOR) Unix Passwords

2001-10-01 Thread Ricky Chilcott
Hugh,   As we are migrating from Merit and we have our shadow file using Unix crypt instead of MD5 because Merit is can not use MD5.   I have read all of the archive messages and the reference book relating to using Unix Crypt passwords and I still am not sure how to use the Encryped-Passwo

(RADIATOR) radiator agains Radiator-2.16.1

2001-10-01 Thread Christian Steger
hello there, first of all, thanks for reading this mail. i use here on a testingplatform an cisco7200, configured with radius authentication and dialin per isdn. it appeared to me that the accounting packages does not equial that packets i have counted per snmp and a networkmonitor independend