(RADIATOR) authentication when SQL/proxyRadius is down

Hugh Irvine hugh at open.com.au
Tue Oct 16 23:49:34 CDT 2001


Hello David -

On Wednesday 17 October 2001 01:13, david.kramar at aliatel.cz wrote:
> Hi
> I'm testing (Radiator/Radmin DEMO ) with some possible configuratin to
> solve our requirements.
> Overview: Radius server is connected to other server with SQL database.
> Radius do Authby SQL or Auth by Radius (proxy)  - based on @realm
>
> So in case of SQL database or proxy radius server is down I would like to
> authenticate (send Access accept)  users ( possible users with bad password
> - it doesn't matter - it's free dial up ) and do accounting to file on
> radius server.
>

You would do something like this:

# define AuthBy clauses

<AuthBy SQL>
	Identifier CheckSQL
	DBSource .....
	DBUsername .....
	DBAuth .....
	......
	AcctFailedLogFileName .....
	AcctFailedLogFileFormat .....
</AuthBy>

<AuthBy RADIUS>
	Identifier ForwardToProxy
	......
	NoReplyHook .....
	AcctFailedLogFileName .....
	AcctFailedLogFileFormat .....
</AuthBy>

<AuthBy TEST>
	Identifier AcceptAll
</AuthBy>

# define Realms

<Realm .....>
	AuthByPolicy ContinueUntilAccept
	AuthBy CheckSQL
	AuthBy AcceptAll
	.....
</Realm>

<Realm .....>
	Identifier AcceptAll
	AuthBy ForwardToProxy
	.....
</Realm>

There is an example NoReplyHook in the file "goodies/hooks.txt" that will 
work with what is shown above.

Also have a look at sections 6.28 and 6.29 in the Radiator reference manual 
included in the file "doc/ref.html" in the distribution.

If you have any other questions please ask.

regards

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list