(RADIATOR) AuthBy Digipass bug ?

Hugh Irvine hugh at open.com.au
Mon Sep 19 16:38:04 CDT 2005


Hello Darko -

The AuthBy DIGIPASS clause cannot be used for additional reply  
attributes.

To do this you will need to use an additional AuthBy SQL clause.

Something like this:


<Handler ....>

         AuthByPolicy ContinueWhileAccept

         <AuthBy DIGIPASS>
                 .....
         </AuthBy>

         <AuthBy SQL>
                 .....
         </AuthBy>

</Handler>


regards

Hugh


On 20 Sep 2005, at 00:34, Darko Delic wrote:

> Hello,
>
> While authenticating trough AuthBy DIGIPASS I have noticed something
> strange namely I could not get any reply attributes when user
> authenticate.
>
> This only relates from data that I want to be retrieved from SQL. I'm
> using following syntax
>         AuthSelect select DP_DATA, DIGIPASS, ALGO_TYPE, REPLYATTR from
> TBL_VASCODP, SUBSCRIBERS where USER_ID=%0 AND USERNAME=%0
>         AuthColumnDef  0,GENERIC, check
>         AuthColumnDef  1,GENERIC, check
>         AuthColumnDef  2,GENERIC, check
>         AuthColumnDef  3,GENERIC, reply
>
> This authenticates user but it does not send any Attributes back to  
> NAS.
>
> Fourth column should return Framed-Protocol = PPP,Framed-IP-Netmask =
> 255.255.255.0.
>
> I think that GENERIC type of first three columns might be the problem
> but could not find any more info in documentation in regards of this
> three fields.
>
> Is this a bug so that this module does not return any reply attributes
> from AuthSelect  or this was done on purpose ?
>
> Anybody have any idea how to force reply attributes from SQL trough  
> this
> module ?
>
> Best Regards
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>


NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list