(RADIATOR) PAM auth

2000-07-03 Thread Mike McCauley
--- Forwarded mail from [EMAIL PROTECTED] Date: Mon, 3 Jul 2000 20:40:13 +1000 (EST) From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: BOUNCE [EMAIL PROTECTED]:Non-member submission from [Bruno Tiago Rodrigues <[EMAIL PROTECTED]>] >From mikem Mon Jul 3 20:40:09 2000 Received: by osca

Re: (RADIATOR) PAM auth

2000-07-03 Thread Bruno Tiago Rodrigues
hey i'm still looking at this... last thing I done was to try to use /usr/lib/security/pam_sample.so.1 as the PAM library (a sample dummy PAM) with always_succeed as a flag. Now it does work so this might be a Solaris problem... - Original Message - > > hi there > > we've been trying to

Re: (RADIATOR) Problem with Simultaneous-Use and proxying

2000-07-03 Thread Joshua M. Thompson
On Mon, 3 Jul 2000, Hugh Irvine wrote: > Radiator should only try to directly query the NAS if you are enforcing strict > simultaneous use with a NasType set for your Client clauses. If you don't have > a NasType set, it won't be queried. The funny part here is it's querying NASes that _aren't_

(RADIATOR) PassLog file

2000-07-03 Thread Radiator
I got the passlog file to only print the password the user enters only if it is a FAIL condition. It all works good except that if they enter an invalid username is doesnt log anything. Has anyone implemented a way to pass the information into the log file on a username fail? I would be hap

Re: (RADIATOR) PassLog file

2000-07-03 Thread Hugh Irvine
Hello Chris - On Mon, 03 Jul 2000, Radiator wrote: > > I got the passlog file to only print the password the user enters only if > it is a FAIL condition. It all works good except that if they enter an invalid > username is doesnt log anything. Has anyone implemented a way to pass the informa

Re: (RADIATOR) Problem with Simultaneous-Use and proxying

2000-07-03 Thread Hugh Irvine
Hello Joshua - On Tue, 04 Jul 2000, Joshua M. Thompson wrote: > > On Mon, 3 Jul 2000, Hugh Irvine wrote: > > > Radiator should only try to directly query the NAS if you are enforcing strict > > simultaneous use with a NasType set for your Client clauses. If you don't have > > a NasType set, it

Re: (RADIATOR) Problem with Simultaneous-Use and proxying

2000-07-03 Thread Joshua M. Thompson
On Tue, 4 Jul 2000, Hugh Irvine wrote: > Do you have Simultaneous-Use check items set for your users? Yes they're coming out of my Auth module (they're a database field). I could yank that out but then I'd be stuck forever unable to enforce simultaneous use limits on my local numbers. It seems

Re: (RADIATOR) Problem with Simultaneous-Use and proxying

2000-07-03 Thread Hugh Irvine
Hello Joshua - On Tue, 04 Jul 2000, Joshua M. Thompson wrote: > On Tue, 4 Jul 2000, Hugh Irvine wrote: > > > Do you have Simultaneous-Use check items set for your users? > > Yes they're coming out of my Auth module (they're a database field). I > could yank that out but then I'd be stuck forev

Re: (RADIATOR) Problem with Simultaneous-Use and proxying

2000-07-03 Thread Edgar R Gutierrez
FYI... This is also happening to me.. I am using a MySQL backend for accountig and authentication --- Edgar R Gutierrez Head of Technical Operations Impact Information Systems Contact Number:+632 7296826 Mobile: +63917 9802340 - Original Message - From: Joshua M. Thompson <[EMAIL PROTECT

Re: (RADIATOR) Problem with Simultaneous-Use and proxying

2000-07-03 Thread Joshua M. Thompson
On Tue, 4 Jul 2000, Hugh Irvine wrote: > This is what it should do, however it is posting a warning to let you know. Is > the real question "can I suppress the warning?"? If so, the answer at the > moment is no, until we completely re-do the logging subsystem. The logging itself doesn't bother m

Re: (RADIATOR) Problem with Simultaneous-Use and proxying

2000-07-03 Thread Hugh Irvine
Hello Joshua - On Tue, 04 Jul 2000, Joshua M. Thompson wrote: > On Tue, 4 Jul 2000, Hugh Irvine wrote: > > > This is what it should do, however it is posting a warning to let you know. Is > > the real question "can I suppress the warning?"? If so, the answer at the > > moment is no, until we co

(RADIATOR) Fwd: AuthFILE modification to do a realm-less lookup in the file

2000-07-03 Thread Hugh Irvine
-- Forwarded Message -- Subject: AuthFILE modification to do a realm-less lookup in the file Date: Tue, 4 Jul 2000 12:00:49 +0930 From: Simon Hackett <[EMAIL PROTECTED]> Hi, We've modified AuthFILE.pm to teach it a new keyword, 'StripRealm', for use inside statements. Wha

(RADIATOR) Fwd: Performing a case-insensitive password match in a users file?

2000-07-03 Thread Hugh Irvine
-- Forwarded Message -- Subject: Performing a case-insensitive password match in a users file? Date: Tue, 4 Jul 2000 12:01:11 +0930 From: Simon Hackett <[EMAIL PROTECTED]> Hi folks (again!), I'm transitioning various radius user files, each servicing a different realm name,

(RADIATOR) Fwd: choosing a default realm name based on the Called-Station-Id

2000-07-03 Thread Hugh Irvine
-- Forwarded Message -- Subject: choosing a default realm name based on the Called-Station-Id Date: Tue, 4 Jul 2000 12:00:33 +0930 From: Simon Hackett <[EMAIL PROTECTED]> Hello, fellow Radiators, We use a PreClientHook (shown below for interest), in order to do something th

(RADIATOR) Re: choosing a default realm name based on the Called-Station-Id

2000-07-03 Thread Hugh Irvine
Hello Simon - On Tue, 04 Jul 2000, Simon Hackett wrote: > Hello, fellow Radiators, > > We use a PreClientHook (shown below for interest), in order to do > something that we find highly useful here - using the called number > as a match string to determine a default realm name. > > What the P

(RADIATOR) Re: AuthFILE modification to do a realm-less lookup in the file

2000-07-03 Thread Hugh Irvine
Hello Simon - On Tue, 04 Jul 2000, Simon Hackett wrote: > Hi, > > We've modified AuthFILE.pm to teach it a new keyword, 'StripRealm', > for use inside statements. > > What this does is tells AuthFILE to look for usernames in the user > file specified after removing the rightmost realm from

(RADIATOR) Re: Performing a case-insensitive password match in a users file?

2000-07-03 Thread Hugh Irvine
On Tue, 04 Jul 2000, Simon Hackett wrote: > Hi folks (again!), > > I'm transitioning various radius user files, each servicing a > different realm name, into the one radiator setup at the moment. > > It's all working - as simply as using AuthBy FILE on each relevant > radius file from each pre