(RADIATOR) Problem with the username that is used for online confirmation

Vangelis Kyriakakis vkyriak at forthnet.gr
Fri Mar 31 01:06:03 CST 2006


Hello Hugh,

         We are running 3.7.1. We are a little behind from the current 
version. If it is something that was fixed in a later version we'll upgrade.

                               Regards
                                   Vangelis

Hugh Irvine wrote:

>
> Hello Vangelis -
>
> What version of Radiator are you running?
>
> regards
>
> Hugh
>
>
> On 30 Mar 2006, at 21:56, Vangelis Kyriakakis wrote:
>
>> Hello Hugh,
>>
>>      Thanks for the answer. The username that I want to get back is  
>> the rewritten one, that is the one I allready store in the  
>> RADONLINE. But What I get is the full original username. I guess  
>> what you told me to do will give me the original username, or am I  
>> wrong?
>>
>>            Regards
>>                 Vangelis Kyriakakis
>>
>> Hugh Irvine wrote:
>>
>>>
>>> Hello Vangelis -
>>>
>>> You must extend the RADONLINE table to include a field to contain  
>>> the  original username and modify the AddQuery so it adds both  the  
>>> rewritten username and the original username to the table.  Then 
>>> the  fifth field in the CountQuery must be the original  username.
>>>
>>> hope that helps
>>>
>>> regards
>>>
>>> Hugh
>>>
>>>
>>> On 30 Mar 2006, at 20:43, Vangelis Kyriakakis wrote:
>>>
>>>> Hello,
>>>>
>>>>     I see from the logfiles that Radiator always uses the whole   
>>>> username that is being authenticated as the username that is  used  
>>>> for online confirmation via SNMP.
>>>>     The manual says in CountQuery "If a user name is present as  
>>>> the  fifth field returned by the query, that is the user name  that 
>>>> will  be used to confirm the user is still on line.".
>>>>     Using the following configuration:
>>>>
>>>> <Handler Client-Identifier=adsl>
>>>>        RejectHasReason
>>>>        RewriteUsername s/^([^@]+).*/$1/
>>>>        AuthBy adsl
>>>>        SessionDatabase Session-dsl
>>>>        AuthLog logger
>>>> </Handler>
>>>>
>>>> <SessionDatabase SQL>
>>>>        Identifier Session-dsl
>>>>        DBSource dbi:Sybase:RADIUS
>>>>        DBUsername tacacs
>>>>        DBAuth xxxxxxx
>>>>        Timeout 5
>>>>        FailureBackoffTime 5
>>>>        AddQuery insert into netman..RADONLINE   
>>>> (USERNAME,NASIDENTIFIER,NASPORT,\
>>>>               ACCTSESSIONID,TIME_STAMP,FRAMEDIPADDRESS,NASPORTTYPE,\
>>>>               SERVICETYPE) values ('%U','%N',0%{NAS-Port},'% {Acct- 
>>>> Session-Id}',\
>>>>               %{Timestamp},'%{Framed-IP-Address}','%{NAS-Port- 
>>>> Type}',\
>>>>               '%{Service-Type}')
>>>>        DeleteQuery delete from netman..RADONLINE where   
>>>> NASIDENTIFIER='%1' and NASPORT=0%2
>>>>        ClearNasQuery delete from netman..RADONLINE where   
>>>> NASIDENTIFIER='%N'
>>>>        CountQuery select NASIDENTIFIER, NASPORT, hextoint  
>>>> (ACCTSESSIONID), FRAMEDIPADDRESS, USERNAME from netman..RADONLINE wh
>>>> ere USERNAME='%U'
>>>> </SessionDatabase>
>>>> If the user that is being authenticated is user at domain then   
>>>> Radiator always uses user at domain as the username that is checked   
>>>> against the snmpget result although the RADONLINE database keeps   
>>>> only user in the USERNAME field.
>>>>
>>>>     Am I doing something wrong, or is this a bug?
>>>>
>>>>                   Regards
>>>>                        Vangelis Kyriakakis
>>>>
>>>> -- 
>>>> Archive at http://www.open.com.au/archives/radiator/
>>>> Announcements on radiator-announce at open.com.au
>>>> To unsubscribe, email 'majordomo at open.com.au' with
>>>> 'unsubscribe radiator' in the body of the message.
>>>
>>>
>>>
>>>
>>> NB:
>>>
>>> Have you read the reference manual ("doc/ref.html")?
>>> Have you searched the mailing list archive (www.open.com.au/ 
>>> archives/ radiator)?
>>> Have you had a quick look on Google (www.google.com)?
>>> Have you included a copy of your configuration file (no secrets),
>>> together with a trace 4 debug showing what is happening?
>>>
>>
>> -- 
>> Archive at http://www.open.com.au/archives/radiator/
>> Announcements on radiator-announce at open.com.au
>> To unsubscribe, email 'majordomo at open.com.au' with
>> 'unsubscribe radiator' in the body of the message.
>
>
>
> NB:
>
> Have you read the reference manual ("doc/ref.html")?
> Have you searched the mailing list archive (www.open.com.au/archives/ 
> radiator)?
> Have you had a quick look on Google (www.google.com)?
> Have you included a copy of your configuration file (no secrets),
> together with a trace 4 debug showing what is happening?
>

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list