(RADIATOR) Looking for someone to test: ADSI with WinNT and dial-in permission

Dirk Tilger D.Tilger at intershop.de
Thu Aug 16 12:00:31 CDT 2001


Hi all,

I tried to configure Radiator to check the dial-in permission
of the NT SAM database, but I was unable to get the RasAdmin 
module working under ActivePerl build 522 and 628, so I tried to 
get it working with ADSI's WinNT provider.
There was no documentation available how to check this item, but
anyhow I found a way that worked with all NT PDC's I have available
here.
I'm now looking for someone who can test it on another system,
because I'm actually not sure, how clean my solution is.

Here is the patch:
----8<----
--- /usr/src/Radiator-2.18.2/Radius/AuthADSI.pm Thu Apr 26 01:47:21 2001
+++ /usr/local/Radiator-2.18.2/Radius/AuthADSI.pm       Wed Aug 15 12:24:20 2001
@@ -158,6 +158,11 @@

        return ($main::REJECT, "Outside allowed login hours")
            unless $self->checkLoginHours($ouser->{LoginHours});
+
+       #
+       # Dirks Dial-In permission check
+       #
+       ($bindstring=~/^WinNT/) && (($ouser->{Parameters}=~/d(.)/m) && (unpack ("C",$1) & 8) || (return ($main::REJECT, "Dial-in permission not granted")));

        # Now check any AuthAttrDefs there may be
        # Find all the check and reply attributes
----8<----

You may download the whole module also from
ftp://ftp.intershop.de/pub/.dirk/AuthADSI.pm

Thank you...
Dirk.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list