Hi,

I have been reading the Mailing list archives in an attempt to find out
how
to split the Authentication and Accounting up, in order to authenticate
from
a flat file, but send the accounting packet to another radius server
(Proxy it)

I have seen one example of this, but it was not very clear. Can you
please help.

I was thinking, something like this might work?

<Handler Realm=realm.net>
      AcctLogFileName         /var/log/radacct/detail
      PreAuthHook             file:"/usr/local/etc/preauthhook.pl"
        AuthByPolicy DoAllAuths 
        <AuthBy FILE> 
                Filename %D/auth_file
        </AuthBy> 
      <AuthBy RADIUS>
        Host              1.1.1.1
            Secret            blahblah
                # AuthPort              1812 # Commented out as only
want to send account
            AcctPort          1813
            ReplyHook         file:"/usr/local/etc/replyhook.pl"
      </AuthBy>
</Handler>

I am guessing if the <AuthBy File> fails, it will reject the user
completely and
not send the accounting packet? If this is the right way to do it? I
basically 
do not want the radius server to know about it unless it authenticates
of the
flat file correctly.

Cheers,

Paul Thornton.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to