(RADIATOR) How can I do this (Globalvar)
Hugh Irvine
hugh at open.com.au
Tue Nov 8 17:18:52 CST 2005
Hello Ryko -
You are correct - GlobalVar's are exactly that - global.
The way to do what you describe is like this:
<Authby RADMIN>
Identifier Use-Radmin
...
AuthSelect BLABLA where USERNAME=%u && SERVICENAME=%
{Handler:Identifier}
... ... Large RADMIN Clause
</Authby>
<Handler Realm=vpn-tnb>
...
Identifier Network-Devices-User
Authby Use-Radmin
</Handler>
hope that helps
regards
Hugh
On 8 Nov 2005, at 22:10, Prins, R. wrote:
>
>
> I try to restrict radmin users to realms
>
> What I tried:
>
> ...
> <Authby RADMIN>
> Identifier Use-Radmin
> ...
> AuthSelect BLABLA where USERNAME=%u && SERVICENAME=%
> {GlobalVar:Service} ... ... Large RADMIN Clause </Authby>
>
> <Handler Realm=vpn-tnb>
> ...
> DefineFormattedGlobalVar Service Network-Devices-User
> Authby Use-Radmin
> </Handler>
>
> It seems you can't set global variables from within a Handler-
> clause. But how can I do what I want to do?
>
> Greetings, Ryko Prins
>
NB:
Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list