Re: [RADIATOR] Radius domain only auth, with password='cisco'

2013-11-06 Thread Hugh Irvine
Hello Michael - This is configured on the Cisco box - you will need to ask your network people to turn it off. regards Hugh On 7 Nov 2013, at 10:05, Michael wrote: > i'm looking to stop it. not set it up. i'm not sure what had > enabled/configured it to start happening. I guess this is

Re: [RADIATOR] Radius domain only auth, with password='cisco'

2013-11-06 Thread Michael
i'm looking to stop it. not set it up. i'm not sure what had enabled/configured it to start happening. I guess this is probably the wrong place to ask. On 06/11/13 04:56 PM, Hugh Irvine wrote: > Hello Michael - > > This sounds like Cisco VPDN tunnelling. > > This example is from the standard “

Re: [RADIATOR] If-then-else logic for AuthBy

2013-11-06 Thread Hugh Irvine
Hello Christopher - Something like this: AuthByPolicy ContinueWhileAccept AuthBy LDAP2 AuthByPolicy ContinueUntilAccept AuthBy DUO AuthBy RADIUS

Re: [RADIATOR] Radius domain only auth, with password='cisco'

2013-11-06 Thread Hugh Irvine
Hello Michael - This sounds like Cisco VPDN tunnelling. This example is from the standard “users” file in the Radiator distribution: # This example shows how to configure a Cisco VPDN circuit: open.com.au User-Password=cisco, Service-Type=Outbound-User cisco-avpair = "vpdn:tunnel-i

[RADIATOR] If-then-else logic for AuthBy

2013-11-06 Thread Christopher Bongaarts
I have a need to handle multiple authentication methods which returns something like this: AuthBy LDAP2 if result = ACCEPT then AuthBy DUO else AuthBy RADIUS with the ultimate authentication result coming from either the DUO or RADIUS module. I tried to figure out a way to arrange

[RADIATOR] Radius domain only auth, with password='cisco'

2013-11-06 Thread Michael
Has anyone ever seen a situation where, for every authentication attempt to a radiator system from a cisco device, there is an authentication attempt right before it that appears to be: - a domain (the username with the 'username@' part stripped off). - plain text password is always 'cisco'. -