Re: [RADIATOR] How do I log all reply attributes sent for an Access-Accept?

2012-04-12 Thread Linuxchuck
On 04/11/2012 01:41 PM, Heikki Vatiainen wrote: > On 04/10/2012 10:42 PM, Linuxchuck wrote: > >> I'm looking for a way to log all possible Reply attributes to my authlog >> file. I use many different types of VSAs, and would rather not have to >> scrub through all o

[RADIATOR] How do I log all reply attributes sent for an Access-Accept?

2012-04-10 Thread Linuxchuck
Hello all, I'm looking for a way to log all possible Reply attributes to my authlog file. I use many different types of VSAs, and would rather not have to scrub through all of my configs just to manually add each named Reply attribute to my stanza. Here's what I currently have: Id

Re: [RADIATOR] New eToken PASS import files have longer secret keys (64 chars vs. 48 chars)

2011-05-16 Thread Linuxchuck
so > we can investigate? > > Cheers. > > On Saturday 14 May 2011 05:35:32 am Linuxchuck wrote: >> Hello again, >> >> I've been successfully using eToken PASS tokens since we moved to Radiator >> without issue. We've recently purchased an addit

[RADIATOR] New eToken PASS import files have longer secret keys (64 chars vs. 48 chars)

2011-05-13 Thread Linuxchuck
Hello again, I've been successfully using eToken PASS tokens since we moved to Radiator without issue. We've recently purchased an additional set of 100 tokens because we were running low, and the DigiPass Go-7 tokens we recently received turn out to be unable to support changing PINs. During

Re: [RADIATOR] DigiPass Static PIN Reset for Go-7?

2011-04-27 Thread Linuxchuck
On 04/05/2011 03:44 PM, Heikki Vatiainen wrote: > On 04/04/2011 07:44 PM, Linuxchuck wrote: > >> Time for a DigiPass token question. I have a box of 125 brand-new >> DigiPass Go-7 tokens that I have imported into our production >> Radiator server, and they work just fi

[RADIATOR] DigiPass Static PIN Reset for Go-7?

2011-04-04 Thread Linuxchuck
Hello again, Time for a DigiPass token question. I have a box of 125 brand-new DigiPass Go-7 tokens that I have imported into our production Radiator server, and they work just fine. My question is: Is the static password change procedure as outlined in the documentation applicable to Go-7 t

Re: [RADIATOR] check-items in chained authby queries

2011-02-03 Thread Linuxchuck
($p)/egs; > > > > > > On Thu, 3 Feb 2011, Michael wrote: > >> >> instead of: >> roupMembershipQuerySELECT groupname FROM v_usergroups WHERE username=%0 >> AND >> groupname=%1 >> >> try: >> roupMembershipQuerySELECT groupname

Re: [RADIATOR] check-items in chained authby queries

2011-02-03 Thread Linuxchuck
set DP_DATA='%0' where DIGIPASS='%1' AuthBy AuthSQLUSR * Attempts to log onto the switch still result in errors as shown in the debug log below. Thanks, Chuck On 02/03/2011 06:01 PM, Linuxchuck wrote: > Michael, > > Ok, I gave it a shot, and got

Re: [RADIATOR] check-items in chained authby queries

2011-02-03 Thread Linuxchuck
List If I cut-and-paste the query from the debug logs into a database query, it returns "group1" as the sole result, indicating that testuser is indeed a member. However, it appears that Radiator does not agree. Any further thoughts? I appear to be getting closer to my goals, and

Re: [RADIATOR] check-items in chained authby queries

2011-02-03 Thread Linuxchuck
;GroupList="Group1 Group2 Group3"' from SUBSCRIBERS where USERNAME=%0 >>> AuthColumnDef 0, Class, request >>> AuthColumnDef 1, GENERIC, check >>> AuthColumnDef 2, GENERIC, check >>>

Re: [RADIATOR] check-items in chained authby queries

2011-02-03 Thread Linuxchuck
%0 AND groupname=%1 >> AuthSelect select PASSWORD, 'Auth-Type=AuthHOTP', >> 'GroupList="Group1 Group2 Group3"' from SUBSCRIBERS where USERNAME=%0 >> AuthColumnDef 0, Class, request >> Aut

[RADIATOR] check-items in chained authby queries

2011-02-03 Thread Linuxchuck
Hello again, I am attempting to validate both the username and appropriate group membership via MySQL on an incoming access-request before bothering to process the HOTP password provided. If the username doesn't exist, or the user is not a member of the group in the list provided, send a rejec

[RADIATOR] Large number and variety of NAS devices with HOTP, SQL Group Validation, and custom SQL Reply Attributes

2011-02-01 Thread Linuxchuck
Hello all, I've done considerable searching and have a few gaps left to fill in my Radiator configuration. I'm hoping the Radiator users out there can help me avoid re-inventing the wheel. I'm currently evaluating Radiator as a replacement to our 3rd-party Active-Directory integrated Windows-