(RADIATOR) PreProcessingHook to bypass further processing

Hugh Irvine hugh at open.com.au
Tue Feb 10 16:02:01 CST 2004


Hello Kwang -

The usual way to do what you describe is to use an AuthBy INTERNAL 
clause followed by a PostAuthHook.

For your question about Handlers, it is more usual to specify a final 
<Handler> to catch "everything else".

# deal with something specific

<Handler ......>
	.....
</Handler>

# deal with everything else

<Handler>
	.....
</Handler>


regards

Hugh


On 11 Feb 2004, at 01:57, Kwang Moon wrote:

> Hi,
>
> Does anyone know if it's possible to carry out some checks in a
> PreProcessingHook, and based on the results to immediately halt the 
> handling
> process and send back a $main::REJECT to the client?
>
> The reason I want to do this is because I have heaps of handlers (all 
> pretty
> much doing the same thing), the only difference being the handler check
> item.  So, what I want to do is create one handler to deal with say
> Access-Request packets and then verify the check item within the say a
> PreProcessingHook (ie if it doesn't match then somehow send a reject
> immediately without further processing, and if it passes then continue 
> with
> hook and return back to the handler).
>
> There was a posting earlier last year:
> http://www.open.com.au/archives/radiator/2003-05/msg00147.html
> asking a very similar question, however, there didn't appear to be a
> resolution.
>
> If this is not possible, then (a question to Mike or Hugh) what's the
> likelihood of getting a feature added to the handler clause similar to 
> the
> IdenticalClients.  It could look something like:
> IdenticalHandlers <attribute=value, attribute=value, ...>
>
>
> Cheers,
> Kwang
>
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list