(RADIATOR) Denying Auth based on Part of a Called-Station-ID

Hugh Irvine hugh at open.com.au
Wed Feb 19 17:58:12 CST 2003


Hello Mike -

There are two ways to do this (at least :-)).

The first and simplest is to use cascaded AuthBy's.

# define AuthBy clauses

<AuthBy FILE>
	Identifier CheckCalledStationId
	Filename %D/calledstations
</AuthBy>

<AuthBy ...>
	Identifier YourNormalAuthBy
	.....
</AuthBy>

.....

# define Realms

<Realm ....>
	AuthBy CheckCalledStationId
	....
</Realm>

.......


The file "%D/calledstations" would contain this:

# calledstations

DEFAULT Called-Station-Id = 8659999999, Auth-Type = YourNormalAuthBy

DEFAULT Auth-Type = Reject


 From your description below I am not sure whether the above will work?

I suspect I may need to see your existing configuration file (no 
secrets) and a bit more detail on exactly what you want to do with the 
Called-Station-Id's.

regards

Hugh


On Wednesday, Feb 19, 2003, at 20:09 Australia/Melbourne, Mike Walker 
wrote:

> This is what I am trying to do:
>
> I need to deny authentication to any number in the 865 area code 'other
> than' 865-999-9999.
>
> My current configuration does not include any <Handler>'s yet, but this
> seems to me like a good place for one.  Problem is, I want it based on 
> a
> 'piece' of the Called-Station-ID (area code), and not the whole thing.
> Basically I just want all subscribers, regardless of realm, not to be
> able to connect to any other 865 POP but the one number we give them.
>
> Please let me know if I am going in the right direction with this, and
> possibly how to get around the 'part of the Called-Station-ID' issue.
> Much thanks in advance for the clues!
>
>
> -Mike Walker
> US Express.net, Inc.
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list