(RADIATOR) default realms

Hugh Irvine hugh at open.com.au
Wed May 23 18:51:21 CDT 2001


Hello Dave, Hello Cory -

Don't forget that the AuthBy RADIUS clause is asynchronous and always returns 
an Ignore immediately. As mentioned in my previous mail, you should probably 
consider giving the different roaming groups different indial numbers and 
using them to select the appropriate Handler.

hth

Hugh

On Thursday 24 May 2001 02:36, Kitabjian, Dave wrote:
> Ahh.
>
> In this case, you have a single default handler:
>
> <Realm DEFAULT>
>
> 	AuthByPolicy  ContinueWhileReject
>
> 	<AuthBy RADIUS>
> 		Identifier  GRIC
> 		...
> 	</AuthBy>
>
> 	<AuthBy RADIUS>
> 		Identifier  USOnline
> 		...
> 	</AuthBy>
> </Realm>
>
> Something like that.
>
> Dave
>
> > -----Original Message-----
> > From: Cory Visi [mailto:visi at discovernet.net]
> > Sent: Wednesday, May 23, 2001 11:59 AM
> > To: Kitabjian, Dave
> > Cc: radiator at open.com.au
> > Subject: Re: (RADIATOR) default realms
> >
> >
> > I would like the requests to be handled in this fashion:
> >
> > Suppose a user logs in with your example, "dave at netcarrier.com".
> > First the realm is checked against any local Realm/Handler statements.
> > Then the first DEFAULT realm statement catches it and proxies
> > it to a GRIC
> > radius server.
> > Finally, the second DEFAULT realm (hypothetically) statement
> > catches it
> > and proxies it to a USOnline radius server.
> > If all of these fail, the radius request fails.
> >
> > In this setup USOnline requests could be pretty slow to
> > repond, but that's
> > ok, since GRIC is more expensive to our end-user.
> >
> > Thanks,
> > Cory
> >
> > Kitabjian, Dave [dave at netcarrier.com] wrote:
> > > Hmm. Well, my question to you is, whom to you WANT to get
> >
> > the default
> >
> > > realms? In other words, say you get a request from
> >
> > "dave at netcarrier.com" --
> >
> > > whom are you going to proxy it to: GRIC or USOnline?
> > >
> > > After you answer that question, we can answer your question.
> > >
> > > Dave
> > >
> > > > -----Original Message-----
> > > > From: Cory Visi [mailto:visi at discovernet.net]
> > > > Sent: Tuesday, May 22, 2001 11:26 AM
> > > > To: radiator at open.com.au
> > > > Subject: (RADIATOR) default realms
> > > >
> > > >
> > > > I'm currently attempting to implement both GRIC and
> >
> > USOnline roaming
> >
> > > > setups. Both of these require me to use a default realm. As
> > > > far as I can
> > > > tell, Radiator only supports one default realm. Is this
> > > > correct? If not,
> > > > how do I get Radiator to recognize two or more entries for a
> > > > default realm
> > > > (currently it seems to use the last definition).
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list