(RADIATOR) Handler/AuthBy clause composition

[Hugh Irvine]

Hello Chris -

Try something like this:


<AuthBy LDAP2>
    Identifier CheckLDAP
    ...
</AuthBy>

<AuthBy RADIUS>
    Identifier CheckRADIUS
    ...
</AuthBy>

<Handler Identifier=Site1-Switch>

    AuthByPolicy ContinueUntilAccept

    <AuthBy GROUP>
       AuthBy CheckLDAP
       AddToReply Tunnel-Private-Group-ID=21
    </AuthBy>

    <AuthBy GROUP>
       AuthBy CheckRADIUS
       AddToReply Tunnel-Private-Group-ID=22
    </AuthBy>

</Handler>

<Handler Identifier=Site1-Wap>

    AuthByPolicy ContinueUntilAccept

    <AuthBy GROUP>
       AuthBy CheckLDAP
       AddToReply Tunnel-Private-Group-ID=23
    </AuthBy>

    <AuthBy GROUP>
       AuthBy CheckRADIUS
       AddToReply Tunnel-Private-Group-ID=24
    </AuthBy>

</Handler>


regards

Hugh


On 18 Aug 2005, at 01:28, Chris Hills wrote:

> Hi
>
> I would like to use the same AuthBy clause, but specify some  
> different AddToReply attributes depending upon the Handler it is  
> used in.
>
> For example,
>
> <AuthBy LDAP2>
>    Identifier CheckLDAP
>    ...
> </AuthBy>
>
> <AuthBy RADIUS>
>    Identifier CheckRADIUS
>    ...
> </AuthBy>
>
> <Handler Identifier=Site1-Switch>
>    <AuthBy CheckLDAP>
>       ^ AddToReply Tunnel-Private-Group-ID=21
>
>    <AuthBy CheckRADIUS>
>       ^ AddToReply Tunnel-Private-Group-ID=22
> </Handler>
>
> <Handler Identifier=Site1-Wap>
>    <AuthBy CheckLDAP>
>       ^ AddToReply Tunnel-Private-Group-ID=23
>
>    <AuthBy CheckRADIUS>
>       ^ AddToReply Tunnel-Private-Group-ID=24
> </Handler>
>
> What is the best way to write this in the config file, without  
> having to resort to distinctive AuthBy clauses?
>
> Regards
>
> -- 
> Chris Hills                       | Tel: +44 (0)1527 572754
> IT Services                       | Fax: +44 (0)1527 572901
> North East Worcestershire College | Web: http://www.ne-worcs.ac.uk/
>
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>


NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.