(RADIATOR) Splitting Auth and Accounting

[Paul Thorton]

Hi,

I have been reading the Mailing list archives in an attempt to find out
how
to split the Authentication and Accounting up, in order to authenticate
from
a flat file, but send the accounting packet to another radius server
(Proxy it)

I have seen one example of this, but it was not very clear. Can you
please help.

I was thinking, something like this might work?

<Handler Realm=realm.net>
      AcctLogFileName         /var/log/radacct/detail
      PreAuthHook             file:"/usr/local/etc/preauthhook.pl"
	AuthByPolicy DoAllAuths 
	<AuthBy FILE> 
		Filename %D/auth_file
	</AuthBy> 
      <AuthBy RADIUS>
      	Host              1.1.1.1
            Secret            blahblah
		# AuthPort		1812 # Commented out as only
want to send account
            AcctPort          1813
            ReplyHook         file:"/usr/local/etc/replyhook.pl"
      </AuthBy>
</Handler>

I am guessing if the <AuthBy File> fails, it will reject the user
completely and
not send the accounting packet? If this is the right way to do it? I
basically 
do not want the radius server to know about it unless it authenticates
of the
flat file correctly.

Cheers,

Paul Thornton.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.