(RADIATOR) Disconnect and Change-of-Authorization Messages
Hugh Irvine
hugh at open.com.au
Wed Mar 31 02:08:03 CST 2004
Hello Jose -
All I can suggest is that you read the Radiator source code and do some
experiments.
regards
Hugh
On 31 Mar 2004, at 02:30, José Borges Ferreira wrote:
>
> Like i told before , we already have several agreements with roamers
> and have exchanged IP/Secrets for Radius.
>
>
> -----------
> | Roamer A | -----\ ----------
> ----------- \ | Radiator |
> ----------- / ----------
> | Roamer B | -----/ | Custom |
> ----------- | Module |
> ----------
> --- HTTP ---| | |---- SNMP -|
> | | |
> | |Radius |
> --------- --------- ---------
> | NAS 1 | | NAS 2 | | NAS 3 |
> --------- --------- ---------
>
>
> On the NASes i can have user belonging (authenticated) by Roamer A or
> B.
>
> By using Radiator i want to :
>
> - Use the current Radius auth/acct settings for all of them.
> - Doesn't have to concern with a IP/UDP/Radius stack. You allready
> have a great work done here ;)
> - Control witch user each Client (Roamer) can disconnect/change witch
> user.
> - Since user can have more than one access method , i must support all
> the diffrents NASes.
>
>
>
> Hugh Irvine wrote:
>
>>
>> Hello Jose -
>>
>> If you are using radius, then it is probably easiest to just use the
>> radius Disconnect-Request (assuming that your NAS supports it).
>>
>> You should check with your NAS vendor.
>>
>> Otherwise I am not convinced that using Radiator is the correct
>> approach.
>>
>> regards
>>
>> Hugh
>>
>>
>> On 29 Mar 2004, at 22:23, José Borges Ferreira wrote:
>>
>>> I want to provide to roamers partners a disconnect facillity. The
>>> use of Radius is obvious , since we allready have secure and
>>> authorized traffic exchange established.
>>>
>>> I would like to develop ( actually extend ) a custom AuthBy Module
>>> to allow the partner to disconnect "their" user. The module should
>>> also understand the NAS type of the user and use the correct method
>>> for that NAS ( SNMP, HTTP or RADIUS).
>>>
>>> My doubts are :
>>> This should be treated the same way as Authentication requests or
>>> Accounting requests.
>>> If so , should i be process them on handle_request or any other
>>> method.
>>>
>>> <j/>
>>
>
>
NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list