Hello again,
Further testing has given rise to more questions:-)
Basically I'm trying to accomplish(see below) usename and password override
for a port usage check. I realize now that RewriteUsername changes the
request packet, this is not what I want. Is there anyway to fake user and
password to "AuthBy RADMIN" ?
Thanks again,
Lisa
> -----Original Message-----
>
> Hi all,
>
> I need to keep track of ports for our customers(we sell ports to other
> ISPs). To keep track of sessions by these customers I'm creating "super
> user"s which reprents these customers, for example Customer1, Customer2
> and
> so on.
>
> The actual user/password authentication will be done by the customers' own
> radius servers.
>
> When the call comes in, I check the ports used by these customers, I count
> based on Customer1 etc., instead of the user(JohnDoe) logging in. I can
> override the user name with RewriteUsername. But the "AuthBy RADMIN"
> checks
> the passowrd of the dialed user against the one in the DB.
>
> I wrote a "${$_[0]}->change_attr('Password','Customer_password');" in the
> corresponding preHandlerHook but doesn't seem to change the password.
>
> How can I override the password check?
>
> Thanks and regards,
> Lisa
>
>
>
> > -----Original Message-----
> > From: Hugh Irvine [SMTP:[EMAIL PROTECTED]]
> > Sent: Thursday, December 14, 2000 5:34 AM
> > To: Lisa Goulet; Lisa Goulet; [EMAIL PROTECTED]
> > Subject: RE: (RADIATOR) Synchronous flag and ReplyHook
> >
> >
> > Hello Lisa -
> >
> > On Thu, 14 Dec 2000, Lisa Goulet wrote:
> > > Hi Hugh,
> > >
> > > Thanks for your response. Here are more details and the config file:
> > >
> > > I have a proxy that executes the handler below. My master radius
> server
> > does
> > > a check for port limits(Identifier LocalCheck). Following that, the
> call
> > is
> > > handed off to a customer radius server(Identifier zonnetproxy). Since
> > they
> > > are both "AuthBy RADIUS"s, I'm using the Synchronous flag. The log
> shows
> > > that the proxy does wait for reply from the first server before
> > processing
> > > further requests.
> > >
> > > As this is causing the NAS to time out a lot, I would like to speed up
> > the
> > > process a bit and have the proxy respond to other requests. Only, I'm
> > not
> > > sure how. You've mentioned the ReplyHook but I'm not sure where to
> > start.
> > >
> >
> > I have to ask the question - why don't you do the AuthBy PORTLIMITCHECK
> > directly on this box, instead of proxying the request? It would be a
> > *much*
> > simpler solution.
> >
> > In any case, with two AuthBy RADIUS clauses, you will indeed have to use
> a
> > ReplyHook in the first one at least. This ReplyHook will check the reply
> > status
> > of the request and if it is Access-Accept, then it will call the second
> > AuthBy
> > RADIUS. You will also have to take care that the first AuthBy RADIUS
> > clause
> > does not reply to the NAS, because it will send an Access-Accept if the
> > AuthBy
> > PORTLIMITCHECK passes.
> >
> > There is an example ReplyHook in the file "goodies/hooks.txt" in the
> > Radiator
> > 2.17.1 distribution (its the fifth example in the file).
> >
> > BTW - if you would like me to write this for you, send a purchase order
> > for a
> > couple of hours consulting time to Joanne ([EMAIL PROTECTED]).
> >
> > hth
> >
> > Hugh
> >
> > --
> > Radiator: the most portable, flexible and configurable RADIUS server
> > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> > -
> > Nets: internetwork inventory and management - graphical, extensible,
> > flexible with hardware, software, platform and database independence.
> >
> >
> > ===
> > Archive at http://www.starport.net/~radiator/
> > Announcements on [EMAIL PROTECTED]
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
