(RADIATOR) Accounting in sql and local file authentication

[Frank Danielson]

Luis-

You have a hanlder inside of a realm. This won't work. You should not
normally use realms and handlers inside of the same config. Try something
like this example. There is a good discussion of the bahviour of handlers in
section 6.16 of my Radiator manual.

<AuthBy SQL>
	 Identifier Remote-SQL
	 DBSource dbi:Oracle:dbname
	 DBUsername username
	 DBAuth pword
	 # Disable authentication
	 AuthSelect

	 # But do accounting
	 AccountingTable ACCOUNTING
	 AcctColumnDef	USERNAME,User-Name
	 AcctColumnDef	TIME_STAMP,Timestamp,integer
</AuthBy>

<AuthBy FILE>
	 Identifier Local-File
	 Filename %D/users
	 # Generate MPPE keys to encrypt pptp vpns
	 AutoMPPEKeys Yes
</AuthBy>

<Handler Realm=blahblah.com>
         RewriteUsername tr/A-Za-z0-9_.+&-@//cd

         AuthByPolicy ContinueAlways
         AuthBy Remote-SQL
         AuthBy Local-File
         
         # Log accounting to the detail file in LogDir
	 AcctLogFileName %L/detail

</Handler>

</Handler>
         <AuthBy FILE>
                 AutoMPPEKeys yes
                 Filename %D/static/users
         </Authby>

         AcctLogFileName %L/detail
</Handler>

-----Original Message-----
From: Luis Marquez [mailto:luism at digitalpath.net]
Sent: Thursday, March 11, 2004 12:39 PM
To: radiator at open.com.au
Subject: (RADIATOR) Accounting in sql and local file authentication


Hello everyone,

I am trying to get radiator to authenticate users from a local users
file and send accounting data to our Oracle 9i database. This config is
currently on a non production test system. I have two authby clauses,
one <AuthBy FILE> and one <AuthBySQL>. I have a handler set up that I
think is supposed to send accounting data to the database while still
authenticating against the local file. I can connect to the database,
but I can't authenticate from the local file.

Seems like radiator does not continue on to the AuthBy FILE clause. From
what I read in another post, the AuthByPolicy ContinueAlways inside the
handler is supposed to do this?

Any advice would be greatly appreciated.

Thanks,

Luis

Here are the relevant parts of my config:

#Default Realm
<Realm DEFAULT>
         <AuthBy FILE>
                 AutoMPPEKeys yes
                 Filename %D/static/users
         </Authby>

         AcctLogFileName %L/detail
</Realm>

<Realm blahblah.com>
         RewriteUsername tr/A-Za-z0-9_.+&-@//cd

         <AuthBy SQL>
                 Identifier Remote-SQL
                 DBSource dbi:Oracle:dbname
                 DBUsername username
                 DBAuth pword
                 # Disable authentication
                 AuthSelect

                 # But do accounting
                 AccountingTable ACCOUNTING
                 AcctColumnDef   USERNAME,User-Name
TIME_STAMP,Timestamp,interger
         </AuthBy>

         <AuthBy FILE>
                 Identifier Local-File
                 Filename %D/users
                 # Generate MPPE keys to encrypt pptp vpns
                 AutoMPPEKeys Yes
         </AuthBy>

         <Handler Request-Type = Accounting-Request>
                 AuthByPolicy ContinueAlways
                 AuthBy Remote-SQL
                 AuthBy Local-File
         </Handler>

# Log accounting to the detail file in LogDir
         AcctLogFileName %L/detail

</Realm>



--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.