(RADIATOR) Feature Request: <AuthBy IMAPS>

Mike McCauley mikem at open.com.au
Thu Nov 11 01:21:16 CST 2004


Hi Charly,

On Thursday 11 November 2004 16:49, Karl Gaissmaier wrote:
> Hi Mike,
>
> Mike McCauley schrieb:
>
> ...
>
> > You are right: it is usually best not to override handle_request. The
> > method you suggest is quite good. I find that for methods that do remote
> > verification of plaintext passwords, it is even better to make findUser
> > return a dummy empty user, and implement check_plain_password. It will
> > then work with PAP and EAP_TTLS_PAP.
>
> that's why I asked you. I didn't dig already so deep
> in the code to recognize the side effects with EAP.
>
> More questions:
> ===============
> What should findUser() return if the login was unsuccesful
> in order to work properly with EAP?

In this model, findUser always succeds (it doesnt actually do any 
authentication testing).

sub findUser
{
    return Radius::User->new();
}

AuthLSA.pm shows a typical use of this strategy.

>
> What about side effects to set 'NoDefault' in
> initilaize, since this can no longer be overridden
> by the user?
>
> Would it be better to set DefaultLimit to 0 and
> document this parameter to enable the user to
> override this value?
It would be better to set NoDefault, unless you really want to support DEFAULT 
users in your IMAP database.

>
> Sorry for so many questions.

No problem.
Cheers.

>
> Best Regards
> 	Charly

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS etc.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list