(RADIATOR) DEFAULT username

Hugh Irvine hugh at open.com.au
Thu May 12 03:50:03 CDT 2005


Hello Valera -

Could you please tell me the name of the registered company that has 
purchased this copy of Radiator?

Please reply to me directly.

In answer to your question, Radiator by default looks for an exact 
match with the username, then DEFAULT, DEFAULT1, .....

If you do not use DEFAULT users and/or you have problems such as you 
describe, you should configure the AuthBy SQL clause with NoDefault.

regards

Hugh


On 12 May 2005, at 18:15, Valera wrote:

> Hi,
> 	On http://www.open.com.au/radiator/faq.html question 82 is 82. Using
> Informix with AuthBy SQL sometimes doesnt work properly We have had 
> reports
> that some versions of DBD-Informix cause Radiator to go into an 
> infinite
> loop, looking for DEFAULT username. The fix for this is to use the 
> NoDefault
> parameter to prevent looking up DEFAULT users.
>
> I'm running radiator with mssql and I had the described above 
> situation.
>
> The only thing I did is created username DEFAULT in database and 
> assign it
> complicated password e.g. dsfkshdfjksdhf343ry43yf%$^fsd.
>
> May be this is not only Informix related problem or not even database
> problem.
> Radiator config:
> <Handler>
> <AuthBy GROUP>
> 	AuthByPolicy ContinueUntilReject
> 	<AuthBy SQL>
> 		DBSource DBI:ODBC:mydsn
> 		DBUsername user
> 		DBAuth password
>
> 		AuthSelect exec dbo.myprocedure '%U',
> 'x1%{Calling-Station-Id}'
> 		AuthColumnDef 0, User-Password, check
> 		AuthColumnDef 1, Time, check
> 		AuthColumnDef 2, GENERIC, reply
> 		
> 		AccountingTable
>
> 		<SessionDatabase SQL>
> 		....
> 		....
> 		</SessionDatabase>
> 	</AuthBy>
> 	
> 	<AuthBy DYNADDRESS>
> 	...
> 	...
> 	</AuthBy>	
> </AuthBy>
> AuthLog myauthlogger
> </Handler>
>
> Trace level 4 made by radpwtst
>
> Thu May 12 07:07:52 2005: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 4067 ....
> Code:       Access-Request
> Identifier: 52
> Authentic:  1234567890123456
> Attributes:
> 	User-Name = "anyuser"
> 	Service-Type = Framed-User
> 	NAS-IP-Address = 203.63.154.1
> 	NAS-Port = 1234
> 	Called-Station-Id = "123456789"
> 	Calling-Station-Id = "987654321"
> 	NAS-Port-Type = Async
> 	User-Password =
> "<157><248>9<153><156>n<4><246><188>8<9><160><216>}x<153>"
>
> Thu May 12 07:07:52 2005: DEBUG: Handling request with Handler ''
> Thu May 12 07:07:52 2005: DEBUG:  Deleting session for DEFAULT12,
> 203.63.154.1, 1234 Thu May 12 07:07:52 2005: DEBUG: do query is: 
> 'delete
> from radonline where NASIDENTIFIER = '203.63.154.1' AND NASPORT = 
> 01234':
>
> Thu May 12 07:07:52 2005: DEBUG: Handling with Radius::AuthGROUP Thu 
> May 12
> 07:07:52 2005: DEBUG: Handling with Radius::AuthSQL Thu May 12 07:07:52
> 2005: DEBUG: Handling with Radius::AuthSQL:
> Thu May 12 07:07:52 2005: DEBUG: Query is: 'exec devel.stopshara 
> 'anyuser',
> 'x1987654321'':
>
> Thu May 12 07:07:52 2005: DEBUG: Radius::AuthSQL looks for match with
> anyuser Thu May 12 07:07:52 2005: DEBUG: Radius::AuthSQL REJECT: Bad
> Password Thu May 12 07:07:52 2005: DEBUG: Query is: 'exec 
> devel.stopshara
> 'DEFAULT', 'x1987654321'':
>
> Thu May 12 07:07:52 2005: DEBUG: Radius::AuthSQL looks for match with
> DEFAULT Thu May 12 07:07:52 2005: DEBUG: Radius::AuthSQL REJECT: Bad
> Password Thu May 12 07:07:52 2005: DEBUG: Query is: 'exec 
> devel.stopshara
> 'DEFAULT1', 'x1987654321'':
>
> Thu May 12 07:07:52 2005: DEBUG: Radius::AuthSQL looks for match with
> DEFAULT1 Thu May 12 07:07:52 2005: DEBUG: Radius::AuthSQL REJECT: Bad
> Password Thu May 12 07:07:52 2005: DEBUG: Query is: 'exec 
> devel.stopshara
> 'DEFAULT2', 'x1987654321'':
>
> Thu May 12 07:07:52 2005: DEBUG: Radius::AuthSQL looks for match with
> DEFAULT2 Thu May 12 07:07:52 2005: DEBUG: Radius::AuthSQL REJECT: Bad
> Password Thu May 12 07:07:52 2005: DEBUG: Query is: 'exec 
> devel.stopshara
> 'DEFAULT3', 'x1987654321'':
>
> Thu May 12 07:07:53 2005: DEBUG: Radius::AuthSQL looks for match with
> DEFAULT3 Thu May 12 07:07:53 2005: DEBUG: Radius::AuthSQL REJECT: Bad
> Password Thu May 12 07:07:53 2005: DEBUG: Query is: 'exec 
> devel.stopshara
> 'DEFAULT4', 'x1987654321'':
>
> Thu May 12 07:07:53 2005: DEBUG: Radius::AuthSQL looks for match with
> DEFAULT4 Thu May 12 07:07:53 2005: DEBUG: Radius::AuthSQL REJECT: Bad
> Password Thu May 12 07:07:53 2005: DEBUG: Query is: 'exec 
> devel.stopshara
> 'DEFAULT5', 'x1987654321'':
>  ......
> And so on
>
> Best regards,
> Valera
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive 
(www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list