(RADIATOR) Multiple Realm Forwarding

Hugh Irvine hugh at open.com.au
Tue Jun 4 01:19:08 CDT 2002


Salut Julien -

You would do something like this:

# define Handlers

<Handler Realm = /partner1.com/>
	RewriteUsername s/\@.*\@/\@/
	.....
</Handler>

......

Voila ce que ca donne:

./radpwtst -user mikem at partner1.com@open.com.au
sending Access-Request...
Tue Jun  4 16:16:01 2002: DEBUG: Packet dump:
*** Received from 127.0.0.1 port 32775 ....
Code:       Access-Request
Identifier: 181
Authentic:  1234567890123456
Attributes:
        User-Name = "mikem at partner1.com@open.com.au"
        Service-Type = Framed-User
        NAS-IP-Address = 203.63.154.1
        NAS-Port = 1234
        Called-Station-Id = "123456789"
        Calling-Station-Id = "987654321"
        NAS-Port-Type = Async
        User-Password = 
"<159><249>:<201><175>\<4><246><188>8<9><160><216>}x<153>"

Tue Jun  4 16:16:01 2002: DEBUG: Handling request with Handler 'Realm = 
/partner1.com/'
Tue Jun  4 16:16:01 2002: DEBUG: Rewrote user name to mikem at open.com.au
Tue Jun  4 16:16:01 2002: DEBUG:  Deleting session for 
mikem at partner1.com@open.com.au, 203.63.154.1, 1234
Tue Jun  4 16:16:01 2002: DEBUG: Handling with Radius::AuthFILE:
Tue Jun  4 16:16:01 2002: DEBUG: Radius::AuthFILE looks for match with 
mikem at open.com.au
Tue Jun  4 16:16:01 2002: DEBUG: Radius::AuthFILE ACCEPT:
Tue Jun  4 16:16:01 2002: DEBUG: Access accepted for mikem at open.com.au
Tue Jun  4 16:16:01 2002: DEBUG: Packet dump:

Facile non?

:-)

A+

Hugues


On Tue, 4 Jun 2002 12:39, jchavanton at oneworldtelecom.ca wrote:
> Hi,
>
> I have seen a feature called "multiple realm forwarding" in steel belted
> radius enterprise. Of course I am sure it is possible to do it whit
> Radiator.
>
> I want my partners to be able to create sub domain that will automaticaly
> be forwarded to them, without having to configure each of them.
>
> @partner1.com at subpartner1.com
> @partner1.com at subpartner1.com <mailto:@partner1.com at subpartner2.com>
> @partner1.com at subpartner3.com
>
> For exemple: I would like thoses 3 realm to be forwarded to the radius
> server of "partner1.com" and I would also like to strip the first realm so
> it will apear as:
>
> @subpartner1.com
> @subpartner2.com
> @subpartner3.com
>
> I think I should use rewrite username to do it ?
> But I dont know how to make my custom rewrite username function ?
>
> The rewrite unsername should take off the first realm but leave the second
> one so I can forward it to my partner.
>
> Thanks!
> Julien
>
> 	-----Original Message-----
> 	From: Toomas Kärner [mailto:tomkar at estpak.ee]
> 	Sent: Tue 5/28/2002 03:49 AM
> 	To: Chavanton Julien; radiator at open.com.au
> 	Cc:
> 	Subject: Re: (RADIATOR) Multiple Realm Forwarding
>
>
>
> 	Hi
>
> 	I think he wants to build a tree of realms. I cant think the use of it yet
> 	but it might be useful on some ways. You could logon to
> 	username at serviceprovider@service at subservice.
>
> 	Tomkar
>
> 	----- Original Message -----
> 	From: "Hugh Irvine" <hugh at open.com.au>
> 	To: <jchavanton at oneworldtelecom.ca>; <radiator at open.com.au>
> 	Sent: Tuesday, May 28, 2002 7:53 AM
> 	Subject: Re: (RADIATOR) Multiple Realm Forwarding
>
> 	> Hello Julien -
> 	>
> 	> Sorry, but I don't quite understand what you are wanting to do.
> 	>
> 	> Could you give me an example please?
> 	>
> 	> thanks
> 	>
> 	> Hugh
> 	>
> 	> > Hi,
> 	> >
> 	> >  Here is what I mean about Multiple realm forwarding:
> 	> >
> 	> >  user1 at realm1@realm2 is forwarded and then striped to user1 at realm2
> 	> > then forwarded again.
> 	> >
> 	> >  I think it can be done using RewriteUsername but I dont have any idea
>
> 	of
>
> 	> > how to modify this syntax : s/^([^@]+)@realm1
> 	> >
> 	> >  Does someone know how to remove the midle realm in
> 	> > user1 at realm1@realm2 using rewriteusername ?
> 	> >
> 	> > I think this can be usefull in many case !
> 	> > Thanks,
> 	> > Julien
> 	> >
> 	> > -------------------------------------------------------
> 	>
> 	> --
> 	> Radiator: the most portable, flexible and configurable RADIUS server
> 	> anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> 	> -
> 	> Nets: internetwork inventory and management - graphical, extensible,
> 	> flexible with hardware, software, platform and database independence.
> 	> ===
> 	> Archive at http://www.open.com.au/archives/radiator/
> 	> Announcements on radiator-announce at open.com.au
> 	> To unsubscribe, email 'majordomo at open.com.au' with
> 	> 'unsubscribe radiator' in the body of the message.
>
> 	===
> 	Archive at http://www.open.com.au/archives/radiator/
> 	Announcements on radiator-announce at open.com.au
> 	To unsubscribe, email 'majordomo at open.com.au' with
> 	'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list