(RADIATOR) double attributes
Anton Krall
akrall at team.inter.net
Thu Feb 28 18:48:24 CST 2002
Guys... Im doing some AUTHBYFILE combined with a AUTHBY RADIUS and I
have a problem.. the radius AUTHBY RADIproxying is returning an
Idle-timeout and Session-Timeout settings..... but what I need is a way
to override those and put in my own... which are passed from a AUTHBY
FILE, here is the config:
<Realm mx.inter.net>
AuthByPolicy ContinueUntilAccept
AuthBy acct
AuthBy CheckUserAttributes-mx.inter.net
</Realm>
<AuthBy SQL>
Identifier acct
DBSource dbi:mysql:radius:localhost
DBUsername root
DBAuth net721009
AuthSelect
DateFormat %Y%m%d %T
AccountingTable accounting
# AccountingStopsOnly
AcctColumnDef username,%U,formatted
AcctColumnDef domain,%R,formatted
AcctColumnDef time_stamp,Timestamp,integer
AcctColumnDef acctstatustype,Acct-Status-Type
AcctColumnDef acctdelaytime,Acct-Delay-Time,integer
AcctColumnDef acctinputoctets,Acct-Input-Octets,integer
AcctColumnDef acctoutputoctets,Acct-Output-Octets,integer
AcctColumnDef acctsessionid,Acct-Session-Id
AcctColumnDef acctsessiontime,Acct-Session-Time,integer
AcctColumnDef acctterminatecause,Ascend-Disconnect-Cause
AcctColumnDef nasidentifier,NAS-IP-Address
AcctColumnDef nasport,NAS-Port,integer
AcctColumnDef framedipaddress,Framed-IP-Address
AcctColumnDef time,Timestamp,integer-date
AcctColumnDef nasipaddress,NAS-IP-Address
AcctColumnDef calledstationid,Called-Station-Id
AcctColumnDef callingstationid,Calling-Station-Id
AcctColumnDef disconnectioncause,Ascend-Connect-Progress
AcctColumnDef telco,Class
AcctColumnDef zone,%{State},formatted
DefaultSimultaneousUse 1
</AuthBy>
<AuthBy FILE>
Identifier CheckUserAttributes-mx.inter.net
Filename %D/atributos-mx.inter.net
Nocache
DefaultSimultaneousUse 1
</AuthBy>
Contents of atributos-mx.inter.net:
akrall Auth-Type = CheckUser-nasc
Service-Type = Framed-User, Framed-Protocol = PPP
DEFAULT Auth-Type = CheckUser-nasc
Service-Type = Framed-User, Framed-Protocol = PPP, Idle-Timeout
= 600, Session-Timeout = 14500
----
The radius server is returning something like this:
Code: Access-Accept
Identifier: 5
Authentic: '<148><168><158><188>z+<231>,<191>|7<254">T@ <mailto:T@<170>
<170>'<148><168><158><188>z+<231>,<191>|7<254>
Attributes:
Framed-IP-Address = 255.255.255.254
Port-Limit = 1
Session-Timeout = 14400
Idle-Timeout = 1800
Framed-IP-Netmask = 255.255.255.255
Class = "38616/217030/10803096/41/NASC"
As you can see. there is some Idle and Session timeoutouts here... but
what I need to do is replace them with the ones in
atributos-mx.inter.net if the user is not found (DEFAULT user) and if he
is on the list (akrall for example) then strip all Idle and Sesion
timeouts....
Problem is that I cant seem to override the radius sent ones... and if I
use something like StripFromReply... all idle and session attributes are
stripped.. incluind mine or the radius server sent ones....
Any ideas?
Saludos
Anton Krall
Director de Tecnología
Inter.net México / Panamá
Tel; 5241-7609 Directo
Tel: 5241-7600 Conmutador
Celular: 0445-105-5160 Mobile
ICQ: 4979450
email: akrall at team.inter.net
web: http://www.mx.inter.net <http://www.mx.inter.net/>
Outside Mexico:
Office: +52(555)241-7609
PBX: +52(555)241-7600
Mobile: +52(555)105-5160
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20020228/2976c6d6/attachment.html>
More information about the radiator
mailing list