(RADIATOR) have I missed something in the documentation?

Hugh Irvine hugh at open.com.au
Mon Mar 11 17:34:32 CST 2002


Hello Slava -

The simplest way to do what you require is to use a NoReplyHook in the AuthBy 
RADIUS clauses. There is an example NoReplyHook in the examples in the file 
"goodies/hooks.txt" in the Radiator distribution.

regards

Hugh


On Tue, 12 Mar 2002 00:57, Rimdenok, Sviatoslav wrote:
>      Hello All,
>      I have an impression that I've missed something in the Radiator's
> documentation.. Let me explain :
>
>      we have the following configuration of Radiator (the extraction from
> the config file):
>
> --------------------------------------------------------------------
> <AuthBy RADIUS>
> 	Identifier blabla
> 	Host A.A.A.A
> 	Host B.B.B.B
> 	Secret test
> 	AuthPort 1645
> 	AcctPort 1646
>       Retries 1
>       RetryTimeout 3
> </AuthBy>
>
> <Handler Called-Station-Id=1205>
> 	AuthBy blabla
> </Handler>
> ----------------------------------
>     That means all authentication/accounting requests with
> Called-Station-Id=1205 are proxied to RADIUS servers A.A.A.A or B.B.B.B.
>     Let's imagine that both RADIUS hosts are down (A.A.A.A and B.B.B.B).
> What I've found is after 1 retries for each RADIUS servers, the Radiator
> software stops proceeding the requests, - it's just ignoring it. For me
> that means there is no any reply back to the NASes.
>     Here comes my question : how can I change this behaviour? I'd like to
> have "access reject"  replies if there is no answers from the remote RADIUS
> servers..
>
>     I've found that I can do it by using <AuthBy GROUP> directives, - just
> add <AuthBy RADIUS> and <AuthBy INTERNAL> blocks inside one <AuthBy GROUP>
> container. Then if there is no reply from any RADIUS servers listed in
> <AuthBy RADIUS> blocks, the request is processed by <AuthBy INTERNAL>
> directive (which returns "REJECT" in any case).
>     It's working but the config file becomes very complex, since I've many
> <AuthBy RADIUS> blocks (one for each company). Is there any other way to
> change that behaviour inside <AuthBy RADIUS> directive?
>
>  Thank you so much for your help!
>
>  sincerely yours,
>  Slava Rimdenok
>
>
>
> Sviatoslav Rimdenok
> System Administrator
> COLT Telecom AG
> Badenerstrasse 820
> CH-8048 Zürich
>
> t: 	+41 1 5 600 900
> f:	 	+41 1 5 600 910
> e:            mailto:sviatoslav.rimdenok at colt.ch
>                www.colt.ch
>
> we make business straight.forward
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list