(RADIATOR) GRIC and <HOST> clause

Hugh Irvine hugh at open.com.au
Wed Dec 18 16:17:58 CST 2002


Hello Craig -

I think there may be some misunderstanding about what happens with GRIC.

There are two parts to any roaming configuration.

The first part is for your customers who are roaming internationally, 
and who are dialling in to ISP's in other parts of the world. These 
customers' radius requests get forwarded to GRIC who then forward them 
on to you for authentication. This part is controlled by the Client 
clasus(s) for the GRIC proxy(s).

The second part is for international roaming customers who are dialling 
in to your NAS infrastructure. For this you generally configure a 
<Realm DEFAULT> clause to forward those requests outbound to the GRIC 
proxy which will then forward them to the target ISP.

If you have any other questions, I will try to provide anwers.

regards

Hugh

PS - when would you like me to come over there to run a Radiator 
training course?

:-)


On Thursday, Dec 19, 2002, at 01:48 Australia/Melbourne, Craig Gittens 
wrote:

> Hi,
>
> I was just wondering if this would work since I define my Clients in a 
> SQL
> DB and the NAS clients are going to be the same for all dialup parties.
> (Your GRIC example in the Ref Manual assumes you have a different 
> client
> defined for the GRIC customers.)
>
> <Realm DEFAULT>
>
> 	<AuthBy RADIUS>
>
> 		<Host a.b.c.d>
> 			Secret xxxxxxxx
> 			IgnoreAcctSignature (This isn't included in the Ref Manual as being 
> a
> valid entry here....)
> 		</Host>
>
> 	</AuthBy>
>
> </Realm>
>
> I somehow don't think this will work since it is a client clause and 
> not a
> radius clause so how do I work around my NAS and IgnoreAcctSignature? 
> If I
> included it in the SQL table would it make a difference for my regular
> realms? I read the REF guide on this flag but I am a bit daft and don't
> understand the implications of it being put in for a NAS that DOESN'T 
> need
> it.
>
> Craig.
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list