Re: (RADIATOR) Different NASes, same realms

2003-02-04 Thread Hugh Irvine
Hello Dan - The manual is available in several formats (PS, PDF, HTML) in the doc directory. I myself use "doc/ref.html" constantly. regards Hugh On Wednesday, Feb 5, 2003, at 12:44 Australia/Melbourne, Dan Melomedman wrote: Hugh Irvine wrote: Hello Dan - The best way to do this sort o

Re: (RADIATOR) Different NASes, same realms

2003-02-04 Thread Dan Melomedman
Hugh Irvine wrote: > > Hello Dan - > > The best way to do this sort of thing is like this: > > # define Client clauses > > > Identifier Ascend-Type-A > . > > > AuthBy Auth-Ascend-Type-A > .. > Ouch, I missed client identifiers in the documentation. Are ther

Re: (RADIATOR) Different NASes, same realms

2003-02-04 Thread Hugh Irvine
Hello Dan - The best way to do this sort of thing is like this: # define Client clauses Identifier Ascend-Type-A . Identifier Ascend-Type-A . Identifier Ascend-Type-B . Identifier Ascend-Type-C . ... # define AuthBy clauses Identifier Auth-Ascend-Type

Re: (RADIATOR) Assign IP's or Default

2003-02-04 Thread Hugh Irvine
Hello William - Yes I do mean request, which you can reference with: $gid = $p->get_attr('Group-Id'); The reason for doing it this way (as described in my previous mail) is because you then don't have to bother with any housekeeping as the request packet is discarded automatically. You can a

Re: (RADIATOR) Assign IP's or Default

2003-02-04 Thread William Taylor
Hi Hugh, Thanks for the info. I was doing something similar with the replaceProfiles hook you were using. I do have a question though. Below in the AuthColumnDef you say Group-Id, request Are you sure that is supposed to be request and not reply? I don't get anything with using "request" when I

(RADIATOR) Different NASes, same realms

2003-02-04 Thread Dan Melomedman
We are getting into compatibility problems with different Ascend NASes from our providers, which requires us to run different AuthBy for each. Since we use them with the same realms, what is the best way to differentiate NASes? Rewrite realms to something weird like realm.com-provider in the s? An

Re: (RADIATOR) Assign IP's or Default

2003-02-04 Thread Hugh Irvine
Hello William - All of what you want to do is fairly straightforward, although dealing with ISDN will probably involve the use of Handlers. Here is what I would do: # define AuthBy clauses Identifier CheckISDN . # set up AuthSelect for ISDN only AuthSelect . . AddToReply Se

Re: (RADIATOR) SnmpgetProg & Maxsessions check

2003-02-04 Thread Hugh Irvine
Hello - You are correct, you can only query the NAS's and maintain a session database from the level of the proxy server. As you rightly point out, if you are receiving the requests from a proxy, the only Client clause is for the proxy itself, not the NAS's. regards Hugh On Tuesday, Feb 4

Re: (RADIATOR) Auth only on same realm

2003-02-04 Thread Hugh Irvine
Hello Tom - Yes. Handlers are evaluated in the order they appear in the configuration file with the first match being the only match. For completeness, you should be aware that mixing Realms and Handlers in the same configuration file is not recommended, as Realms are *always* evaluated befor

(RADIATOR) Assign IP's or Default

2003-02-04 Thread William Taylor
Ok guys, Im trying to finish up my migration off of livingston radius. Here is what I would like to do. Currently in radiator I am authing users out of an SQL database. Some of my users have Static IP address and Framed routes. For these users I had entries in the Users File in livingston. F

RE: (RADIATOR) Auth only on same realm

2003-02-04 Thread Frank Danielson
Yes. You shut put your most detailed match first and work down to more generic ones. -Original Message- From: Tom Swenson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 04, 2003 12:14 PM To: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Auth only on same realm Just so I understand correc

Re: (RADIATOR) Auth only on same realm

2003-02-04 Thread Tom Swenson
Just so I understand correctly. Does the handlers work like a cisco access list in that it will start at the top of the file and the first handler that matches, it is completed? Tom Swenson - CTO NetConX - Internet Access - Client Managed Web Database Applications Wireless - Virus Blocking - Spam

(RADIATOR) radwho.cgi suggestion

2003-02-04 Thread petri . maenpaa
Hi, I use radwho.cgi with SQL DB and was interested on the time online for some users. Script does not sort properly clicking "Time On" link, so I modified script as below. I'm yet to install 3.5, so I haven't checked whether this is already ok. # diff /sysadmin/Radiator-3.4/goodies/radwho.cgi r

Re: (RADIATOR) SnmpgetProg & Maxsessions check

2003-02-04 Thread tdn
Hi I have gone thru' the FAQs, and something still not clear to me. I have a proxy radius server, which proxies the requests based on usr_chassis_call_slot for the Hipers and called_station_id for the as5300. On the proxy radius server config, there is no any check for Maxsessions. My SessionDatab