(RADIATOR) PAP and CHAP in the same realm

terry at ccis.net terry at ccis.net
Wed Jan 22 12:59:30 CST 2003


We are currently authenticating via Unix-encrypted passwords stored locally
on the radiator server. We're signing up with a nationwide service that
uses Qwest as one of their providers, and therefore requires us to use both
PAP and CHAP authentication. I have access to the plaintext
username/password pairs in a MySQL database, but I have no idea how to set
up for CHAP or possibly PAP in the same realm. Is anybody else set up using
a similar mechanism, and could you give me an idea how you addressed the
problem? Here is what we currently use, if that is of any help: (the new
MySQL database is "plat_rpl", and the table is "customer", in case it
matters)

 <Handler>
        # remove the "@domain" part (if it exists)
        RewriteUsername s/^([^@]+).*/$1/
        # remove spaces
        RewriteUsername s/\s//g
        AuthByPolicy ContinueAlways
        AcctLogFileName %L/detail
        AuthLog logger1
        <AuthBy SQL>
                # AuthSelect with empty string means dont do auth
                AuthSelect
                DBSource        dbi:mysql:radius
                DBUsername      XXXXXXX
                DBAuth          XXXXXXX
                AccountingTable ACCOUNTING
                AcctColumnDef   USERNAME,User-Name
                AcctColumnDef   TIME_STAMP,Timestamp,integer
                AcctColumnDef   ACCTSTATUSTYPE,Acct-Status-Type
                AcctColumnDef   ACCTDELAYTIME,Acct-Delay-Time,integer
                AcctColumnDef   ACCTINPUTOCTETS,Acct-Input-Octets,integer
                AcctColumnDef   ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
                AcctColumnDef   ACCTSESSIONID,Acct-Session-Id
                AcctColumnDef   ACCTSESSIONTIME,Acct-Session-Time,integer
                AcctColumnDef   ACCTTERMINATECAUSE,Acct-Terminate-Cause
                AcctColumnDef
ASCENDDISCONNECTCAUSE,Ascend-Disconnect-Cause
                AcctColumnDef   ASCENDDATARATE,Ascend-Data-Rate
                AcctColumnDef   ASCENDXMITRATE,Ascend-Xmit-Rate
                AcctColumnDef
ASCENDCONNECTPROGRESS,Ascend-Connect-Progress
                AcctColumnDef   NASIDENTIFIER,NAS-Identifier
                AcctColumnDef   NASPORT,NAS-Port,integer
                AcctColumnDef   FRAMEDIPADDRESS,Framed-IP-Address
                AcctColumnDef   NASIPADDRESS,NAS-IP-Address
                AcctColumnDef   CALLEDSTATIONID,Called-Station-Id
                AcctColumnDef   CALLINGSTATIONID,Calling-Station-Id
                AcctColumnDef   CONNECTINFO,Connect-Info
        </AuthBy>
        # Make sure they appear in the users2 file
        # Anyone with Auth-Type=UNIX in the users2 file will be
        # authenticated with the AuthBy UNIX above
        <AuthBy FILE>
                Filename        %D/users2
        </AuthBy>

</Handler>

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list