(RADIATOR) Access-Accept regardless of credentials...

Hugh Irvine hugh at open.com.au
Tue Jan 18 17:44:23 CST 2005


Hello Peter -

Something like this:

# define Client

<Client n.n.n.n>
	Identifier SpecialNAS
	.....
</Client>

.....

# define Handler

<Handler Client-Identifier = SpecialNAS>
	<AuthBy INTERNAL>
		AuthResult ACCEPT
		AcctResult ACCEPT
	</AuthBy>
</Handler>

regards

Hugh


On 19 Jan 2005, at 05:43, Frank Danielson wrote:

> Hi Peter-
>
> Check out AuthBy INTERNAL. It does no checking and lets you specify a
> default action for requests. It's in section 6.46 of my manual.
>
> Frank Danielson
> Infrastructure Architect
>
> ClearSky Mobile Media
> 56 E. Pine St.
> Orlando, FL 32801
> USA
>
> -----Original Message-----
> From: Peter Bates [mailto:Peter.Bates at lshtm.ac.uk]
> Sent: Tuesday, January 18, 2005 1:06 PM
> To: radiator at open.com.au
> Subject: (RADIATOR) Access-Accept regardless of credentials...
>
>
>
> Hello all...
>
> I'll admit from the start it's an odd question, but we have a strange
> historical situation to account for it.
>
> Basically we have a NAS (a Cisco 3640) that people have been using for
> some time, with the intention of having the box use RADIUS
> authentication. This was never achieved, but now, as part of another
> project we've implemented Radiator.
>
> Now, this may seem odd, but is there an Auth method or something
> similar which will basically always reply 'OK', regardless of
> credentials? We want to point the NAS at Radiator, but have a suspicion
> people have never switched to using their network credentials for
> access, possibly leaving username/password blank or with random values.
>
> I know this might seem a bit out of the ordinary, but if there is a way
> of achieving this (the requests will come from a particular client
> fenced off with a particular <Handler> statement), I'd be most
> grateful...
>
> Thanks.
>
>
>
> ----------------------------------------------------------------------- 
> -----
> ----------------------->
> Peter Bates, Systems Support Officer, IT Services.
> London School of Hygiene & Tropical Medicine.
> Telephone:0207-958 8353 / Fax: 0207- 636 9838
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive  
(www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list