(RADIATOR) Blocked users getting access
Barry Andersson
barry at simplex.net.au
Mon Jan 28 21:14:28 CST 2002
Hi,
We authenticate via unix /etc/passwd file and also use ./users to block some
users from dialup access by setting dummy passwords in that file.
For some reason Radiator is not reading the users file or if it is then
/etc/passwd is taking precendence and letting these blocked users have
access.
Below is my radius.cfg file.
All the best
Barry Andersson
LogDir /var/log/radius
DbDir .
Trace 4
BindAddress 203.87.53.16
AuthPort 1645
AcctPort 1646
# Localhost
<Client 203.87.53.16>
Secret xxxxxx
NasType ignore
DefaultRealm auth
</Client>
#The Comindico client
#COMindico New South Wales
<Client 203.194.28.131>
Secret xxxxxxx
NasType ignore
DefaultRealm auth
</Client>
<Client 203.194.28.132>
Secret xxxxxx
NasType ignore
DefaultRealm auth
</Client>
#COMindico Victoria
<Client 203.194.56.120>
Secret xxxxxx
NasType ignore
DefaultRealm auth
</Client>
<Client 203.194.56.121>
Secret xxxxxx
NasType ignore
DefaultRealm auth
</Client>
#COMindico Queensland
<Client 203.194.59.120>
Secret xxxxxxx
NasType ignore
DefaultRealm auth
</Client>
<Client 203.194.59.121>
Secret xxxxxx
NasType ignore
DefaultRealm auth
</Client>
#OTHER
<Client 203.87.53.3>
Secret xxxxxx
NasType ignore
DefaultRealm auth
</Client>
<Client 203.87.53.4>
Secret xxxxxx
NasType ignore
DefaultRealm auth
</Client>
<SessionDatabase SQL>
Identifier SDB1
DBSource dbi:mysql:radius
DBUsername xxxxx
DBAuth xxxxxxx
</SessionDatabase SQL>
<Realm auth>
RewriteUsername s/^([^@]+).*/$1/
MaxSessions 1
<AuthBy FILE>
Filename ./users
</AuthBy>
<AuthBy SYSTEM>
UseGetspnamf
Identifier System
</AuthBy>
AcctLogFileName /var/log/radius/detail
</Realm>
<Realm>
<AuthBy INTERNAL>
AcctResult ACCEPT
</AuthBy>
</Realm>
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list