(RADIATOR) ipass problem

Ayotunde Itayemi aitayemi at metrong.com
Thu Nov 28 14:08:14 CST 2002


Hi Hugh, Hi All,

I am testing my config for ipass. I have used ipass' own config checker
from the prompt of my radiator server, and I was able to authenticate the
username/password given to me by ipass.

But dialing into one of the NASes on my network with the same credentials
results in a "request denied" . Any help would be appreciated.

My config:

=======================================<Client 80.4.4.30>
        Secret asecret
        DupInterval 0
 NasType Patton
 SNMPCommunity patt222
        Identifier viruse1
 IdenticalClients 80.4.4.61 80.4.4.92
 RewriteUsername s/^IPASS\/([^@]+)\@([^@]+)$/IPASS\/$1#$2\@myipass/
</Client>
<Client localhost>
# ipass client for VNAS (incoming roamers)
 Secret asecret
 Identifier ipassclient
 IdenticalClients 63.4.4.212
 RewriteUsername s/^IPASS\/([^@]+)\@([^@]+)$/IPASS\/$1#$2\@myipass/
</Client>
# =================== AUTH BYs =================================
###### proxy radius for IPASS
<AuthBy RADIUS>
        Identifier      ipassNetserver
        Host            63.4.4.212
        Secret          asecret
        AuthPort        11812
        AcctPort        11813
#        AddToRequest NAS-IP-Address=%N
 AddToRequest Called-Station-Id=%{Called-Station-Id}, NAS-IP-Address=%N
</AuthBy>
#=================== HANDLERs   ================================
<Handler Realm=myipass>
 AcctLogFileName  %L/ipass/detail
 RewriteUsername  s/^IPASS\/([^#]+)\#([^@]+)\@myipass$/IPASS\/$1\@$2/
# MaxSessions 1
 AuthBy ipassNetserver
</Handler>
<Handler Client-Identifier=ipassclient>
        AuthByPolicy ContinueWhileAccept
        RewriteUsername s/^([^@]+).*/$1/
        RewriteUsername tr/A-Z/a-z/
        UsernameCharset a-zA-Z0-9\._ at -
        AcctLogFileName         %L/account.log
        PasswordLogFileName     %L/password.log
        SessionDatabase SDB1
        AuthBy SQLClientauth
StripFromReply Framed-IP-Address
</Handler>
<Handler Client-Identifier=viruse1>
        AuthByPolicy ContinueWhileAccept
        RewriteUsername s/^([^@]+).*/$1/
RewriteUsername tr/A-Z/a-z/
        UsernameCharset a-zA-Z0-9\._ at -
#        MaxSessions 1
# Show rejection reason to users
        RejectHasReason
        AcctLogFileName         %L/account.log
        PasswordLogFileName     %L/password.log
        SessionDatabase SDB1
        AuthBy SQLClientauth
# AuthBy pattonIPADDRESSauth
</Handler>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20021128/500138b1/attachment.html>


More information about the radiator mailing list