(RADIATOR) AuthLog + ContinueWhileReject behavior?

Dave Kitabjian dave at netcarrier.com
Fri Dec 13 15:23:13 CST 2002


Hello!

Here is my config: 


<Handler Realm=>

   AuthBy LDAP_GROUP

   AuthLog  AUTH_LOGGER

</Handler>
<AuthBy GROUP>     

   Identifier LDAP_GROUP
  
   AuthByPolicy   ContinueWhileReject
   AuthBy         LDAP_AUTH_1
   AuthBy         LDAP_AUTH_2

</AuthBy>
<AuthLog FILE>
   
        Identifier      AUTH_LOGGER
	...
</AuthLog>

I seem to be observing the following behavior: if a user fails at
LDAP_AUTH_1 and then continues on to LDAP_AUTH_2, the only
authentication attempt logged by AUTH_LOGGER is the LAST one, not both.

Is that the correct behavior? It's presenting a problem to us. If a user
is typing the wrong password and that's why they fail at LDAP_AUTH_1,
they will move on to LDAP_AUTH_2, get "no such user", and the authby
logs, which are visible to our techs, only see "no such user". They
don't see the real reason he failed in the first place: bad password.

Am I missing something? Is there a way to capture both AuthBy attempts
in the AuthLog?

Thanks!

Dave
:)
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list