(RADIATOR) Multiple realms in handler

[Hugh Irvine]

Hello Steinar -

On Monday 17 September 2001 20:16, sthaug at nethelp.no wrote:
> > > For example we'd like to block calls from 0265773xxx and 0265774xxx to
> > > 0265473002. What is the most effective way of implementing this?
> > > A specific handler, or combination with database.
> >
> > The best way to do this probably depends on what else you have
> > configured, however here is a Handler to do it:
>
> OK, assuming we're using AuthBy SQL to authenticate users against a Mysql
> database - what would be the best way to create a "blacklist" facility for
> specific phone numbers?
>

This has been discussed on this list before, so check the archive to see the 
previous discussion.

In any case, you might do something like this:

# define AuthBy clauses

<AuthBy SQL>
	Identifier CheckBlackList
	.....
	AuthSelect select ACTION from BLACKLIST \
		where NUMBER = '%{Calling-Station-Id}'
	AuthColumnDef 0, GENERIC, check
</AuthBy>

<AuthBy SQL>
	Identifier CheckUsers
	.....
</AuthBy>

# define Realm(s) or Handler(s)

<Handler .....>
	AuthByPolicy ContinueWhileAccept
	AuthBy CheckBlackList
	AuthBy CheckUsers
	.....
</Handler>

.......

The BLACKLIST table would contain something like this:

NUMBER	ACTION
111111111	Auth-Type = Reject
222222222	Auth-Type = Reject
......
DEFAULT	Auth-Type = Accept


There are many variations possible.

hth

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.