(RADIATOR) Re: PIN code authentication + hijack traffic and force end user to a specific portal to login?

Hugh Irvine hugh at open.com.au
Thu Apr 17 20:23:02 CDT 2008


Hello Scott -

Radiator does not do any sort of backup - this is something for your  
database to do.

regards

Hugh


On 17 Apr 2008, at 20:38, ScottXiao163 wrote:
> Hello Hugh
> Your advice is good,appreciate. Can you also clarify on this  
> portion of my questions:
> Does Radiator support asynchronous
>> bidirectional backup ,or synchronous bidirectional backup ? Please  
>> correct me if I didn't use the correct term for that.
>
> Thanks!
> Regards
> Scott
>
>
> ----- Original Message ----- From: "Hugh Irvine" <hugh at open.com.au>
> To: "ScottXiao163" <scottshaw at 163.com>
> Cc: <radiator at open.com.au>
> Sent: Thursday, April 17, 2008 4:56 PM
> Subject: Re: (RADIATOR) Re: PIN code authentication + hijack  
> traffic and force end user to a specific portal to login?
>
>
>>
>> Hello Scott -
>>
>> The best answer you will get is by setting up your own test   
>> environment and doing some tests.
>>
>> You can set up a Log FILE clause with LogMicroseconds (requires  
>> Time- Hires from CPAN) which will show you exactly how long each  
>> processing step will take. You will then know the maximum number  
>> of requests per second that you can process in your environment.
>>
>> The critical variable is the number of RADIUS requests per second   
>> that you will need to process - you can then use your test results  
>> to determine how much hardware you will require.
>>
>> It is extremely important when using sn SQL database to have a  
>> really good database administrator involved.
>>
>> hope that helps
>>
>> regards
>>
>> Hugh
>>
>>
>>
>> On 17 Apr 2008, at 15:07, ScottXiao163 wrote:
>>> Hi Hugh
>>> I tried to contact archred with email, but no response yet for a   
>>> few days,I will try again.So you know there are some cases that   
>>> archred works as access controller with radiator to hijack the   
>>> traffic and redirect to its portal login page?
>>> I have another question regarding backup. I know Radiator 's  
>>> config  file can be easily copy out for backup.What about the the  
>>> whole  system and database? My project now is, we may put the MS  
>>> SQL  server workgroup edition  on the same windows 2003 server  
>>> as  Radiator 4.2, Radmin and Radar. Does Radiator support  
>>> asynchronous  bidirectional backup ,or synchronous bidirectional  
>>> backup ? Please  correct me if I didn't use the correct term for  
>>> that. Or it's not  related to radiator at all? Just MS SQL server  
>>> backup?
>>> Do you have any recommended hardware config for MS SQL server to   
>>> work with Radiator to cater up to 5000 concurrently  
>>> authentication  login? My current design is only MS SQL server  
>>> workgroup edition  one CPU, windows 2003 server, Radiator 4.2  
>>> plus radmin,radar. Do  you think it will be any performance issue  
>>> if 5000 concurrent login  come in?Or maximu how many will be best  
>>> practice for MS SQL server  workgroup edtion with Radiator?
>>> I think there might be some topics in archive of mailling list   
>>> too,just cannot find out.Any tip to search that in the archive?  
>>> It  would be better if you have some reference document on the  
>>> best  practice.
>>> thanks
>>> scott
>>>
>>>
>>> ----- Original Message ----- From: "Hugh Irvine" <hugh at open.com.au>
>>> To: "ScottXiao163" <scottshaw at 163.com>
>>> Cc: <radiator at open.com.au>
>>> Sent: Friday, April 11, 2008 4:20 PM
>>> Subject: Re: (RADIATOR) Re: PIN code authentication + hijack   
>>> traffic and force end user to a specific portal to login?
>>>
>>>
>>>>
>>>> Hello again Scott -
>>>>
>>>> You may find this useful:
>>>>
>>>> http://www.archred.com/products.html
>>>>
>>>> regards
>>>>
>>>> Hugh
>>>>
>>>>
>>>> On 11 Apr 2008, at 17:29, ScottXiao163 wrote:
>>>>> Hello Hugh
>>>>> Thanks. Will try (Or search for some tools if there is any  
>>>>> available...)...
>>>>> Regarding the first question,is there module allows radiator   
>>>>> server to hijack traffic
>>>>> and  force end user to a specific portal to login,or any  
>>>>> advice  on that?
>>>>> Thanks
>>>>> Scott
>>>>> ----- Original Message ----- From: "Hugh Irvine"  
>>>>> <hugh at open.com.au>
>>>>> To: "ScottXiao163" <scottshaw at 163.com>
>>>>> Cc: <radiator at open.com.au>
>>>>> Sent: Friday, April 11, 2008 2:33 PM
>>>>> Subject: Re: (RADIATOR) Re: PIN code authentication + hijack    
>>>>> traffic and force end user to a specific portal to login?
>>>>>
>>>>>
>>>>>>
>>>>>> Hello Scott -
>>>>>>
>>>>>> You would write an SQL script to populate the database.
>>>>>>
>>>>>> regards
>>>>>>
>>>>>> Hugh
>>>>>>
>>>>>>
>>>>>> On 11 Apr 2008, at 16:30, ScottXiao163 wrote:
>>>>>>> Hello Hugh
>>>>>>> Thanks! I also guess it's just a kind of simple user name   
>>>>>>> without password,while user name is numeric.Nothing to do  
>>>>>>> with  the real PIN,like two factors PIN for secure login. So  
>>>>>>> in this  case, the administrator just use Radmin to create a  
>>>>>>> numeric  user while leaving password blank,print out the  
>>>>>>> voucher. If  the customer  need to usr Radmin to import an  
>>>>>>> excel user list,  or randomly  create thousands of prepaid  
>>>>>>> users with  Radmin,what is the best  way you suggest we do?I  
>>>>>>> didn't see  the option of creating  multiple users in  
>>>>>>> Radmin's UI yet.
>>>>>>> Thanks!
>>>>>>> best regards
>>>>>>> Scott
>>>>>>> ----- Original Message ----- From: "Hugh Irvine"   
>>>>>>> <hugh at open.com.au>
>>>>>>> To: "ScottXiao163" <scottshaw at 163.com>
>>>>>>> Cc: <radiator at open.com.au>; "Mike McCauley" <mikem at open.com.au>
>>>>>>> Sent: Friday, April 11, 2008 1:46 PM
>>>>>>> Subject: Re: PIN code authentication + hijack traffic and   
>>>>>>> force  end user to a specific portal to login?
>>>>>>>
>>>>>>>
>>>>>>>>
>>>>>>>> Hello Scott -
>>>>>>>>
>>>>>>>> What you are describing is just a simple numeric username   
>>>>>>>> which is used as the username when performing RADIUS   
>>>>>>>> authentication.
>>>>>>>>
>>>>>>>> Many organisations use this sort of system for prepaid    
>>>>>>>> internet access - there is nothing special required.
>>>>>>>>
>>>>>>>> regards
>>>>>>>>
>>>>>>>> Hugh
>>>>>>>>
>>>>>>>>
>>>>>>>> On 11 Apr 2008, at 11:44, ScottXiao163 wrote:
>>>>>>>>> Hello team
>>>>>>>>> Does Radiator support PIN code authentication?
>>>>>>>>> Network envirionment is  Airport deporture lounge WIFI    
>>>>>>>>> network. The user need to purchase a voucher which include   
>>>>>>>>> a  PIN code. The user launch IE on laptop,get a portal  
>>>>>>>>> for   authentication. The user need key in the PIN code  
>>>>>>>>> instead  of  username/password, start to surf internet once  
>>>>>>>>> the PIN   authentication successful through  radiator  
>>>>>>>>> Radius server.
>>>>>>>>> Does Radiator can be configured to support this?I have  
>>>>>>>>> read   some documents mentioned digipass,but it's to  
>>>>>>>>> enhance the authentication with two factors PIN, I don't  
>>>>>>>>> think the   customer will make it so complicated in airport  
>>>>>>>>> wifi.
>>>>>>>>>
>>>>>>>>> Thank you !
>>>>>>>>> Best regards
>>>>>>>>> Scott
>>>>>>>>> ----- Original Message ----- From: "ScottXiao163"  
>>>>>>>>> <scottshaw at 163.com>
>>>>>>>>> To: "Hugh Irvine" <hugh at open.com.au>
>>>>>>>>> Cc: <radiator at open.com.au>; "Mike McCauley"  
>>>>>>>>> <mikem at open.com.au>
>>>>>>>>> Sent: Wednesday, April 09, 2008 9:51 PM
>>>>>>>>> Subject: (RADIATOR) any module allows radiator server to   
>>>>>>>>> hijack traffic and force end user to a specific portal to  
>>>>>>>>> login?
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>> Hello team
>>>>>>>>>> Is there any module allows radiator server to hijack   
>>>>>>>>>> traffic and force end user to a specific portal to login?   
>>>>>>>>>> Usually  what we did before is, to let customer buy a   
>>>>>>>>>> access  controller ,and it can do hijack and force all  
>>>>>>>>>> DHCP (or event  static IP address user) users ' web  
>>>>>>>>>> brower  redirect to a web  server's login page.The login  
>>>>>>>>>> will use  radiator's AAA  servcie. But now many AC has  
>>>>>>>>>> their own  builtin AAA service ,  so the custome may not  
>>>>>>>>>> need radiator  at all if we introduce  the AC to customer.  
>>>>>>>>>> that's why I  ask if there is any optional  module can do  
>>>>>>>>>> this. any advice?
>>>>>>>>>>
>>>>>>>>>> Thanks!
>>>>>>>>>> Scott
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> NB:
>>>>>>>>
>>>>>>>> Have you read the reference manual ("doc/ref.html")?
>>>>>>>> Have you searched the mailing list archive (www.open.com.au/  
>>>>>>>> archives/ radiator)?
>>>>>>>> Have you had a quick look on Google (www.google.com)?
>>>>>>>> Have you included a copy of your configuration file (no  
>>>>>>>> secrets),
>>>>>>>> together with a trace 4 debug showing what is happening?
>>>>>>>> Have you checked the RadiusExpert wiki:
>>>>>>>> http://www.open.com.au/wiki/index.php/Main_Page
>>>>>>>>
>>>>>>>> -- 
>>>>>>>> Radiator: the most portable, flexible and configurable  
>>>>>>>> RADIUS server
>>>>>>>> anywhere. Available on *NIX, *BSD, Windows, MacOS X.
>>>>>>>> Includes support for reliable RADIUS transport (RadSec),
>>>>>>>> and DIAMETER translation agent.
>>>>>>>> -
>>>>>>>> Nets: internetwork inventory and management - graphical,  
>>>>>>>> extensible,
>>>>>>>> flexible with hardware, software, platform and database  
>>>>>>>> independence.
>>>>>>>> -
>>>>>>>> CATool: Private Certificate Authority for Unix and Unix-like  
>>>>>>>> systems.
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> Archive at http://www.open.com.au/archives/radiator/
>>>>>>> Announcements on radiator-announce at open.com.au
>>>>>>> To unsubscribe, email 'majordomo at open.com.au' with
>>>>>>> 'unsubscribe radiator' in the body of the message.
>>>>>>
>>>>>>
>>>>>>
>>>>>> NB:
>>>>>>
>>>>>> Have you read the reference manual ("doc/ref.html")?
>>>>>> Have you searched the mailing list archive (www.open.com.au/  
>>>>>> archives/ radiator)?
>>>>>> Have you had a quick look on Google (www.google.com)?
>>>>>> Have you included a copy of your configuration file (no secrets),
>>>>>> together with a trace 4 debug showing what is happening?
>>>>>> Have you checked the RadiusExpert wiki:
>>>>>> http://www.open.com.au/wiki/index.php/Main_Page
>>>>>>
>>>>>> -- 
>>>>>> Radiator: the most portable, flexible and configurable RADIUS   
>>>>>> server
>>>>>> anywhere. Available on *NIX, *BSD, Windows, MacOS X.
>>>>>> Includes support for reliable RADIUS transport (RadSec),
>>>>>> and DIAMETER translation agent.
>>>>>> -
>>>>>> Nets: internetwork inventory and management - graphical,   
>>>>>> extensible,
>>>>>> flexible with hardware, software, platform and database   
>>>>>> independence.
>>>>>> -
>>>>>> CATool: Private Certificate Authority for Unix and Unix-like   
>>>>>> systems.
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Archive at http://www.open.com.au/archives/radiator/
>>>>>> Announcements on radiator-announce at open.com.au
>>>>>> To unsubscribe, email 'majordomo at open.com.au' with
>>>>>> 'unsubscribe radiator' in the body of the message.
>>>>>
>>>>
>>>>
>>>>
>>>> NB:
>>>>
>>>> Have you read the reference manual ("doc/ref.html")?
>>>> Have you searched the mailing list archive (www.open.com.au/  
>>>> archives/ radiator)?
>>>> Have you had a quick look on Google (www.google.com)?
>>>> Have you included a copy of your configuration file (no secrets),
>>>> together with a trace 4 debug showing what is happening?
>>>> Have you checked the RadiusExpert wiki:
>>>> http://www.open.com.au/wiki/index.php/Main_Page
>>>>
>>>> -- 
>>>> Radiator: the most portable, flexible and configurable RADIUS  
>>>> server
>>>> anywhere. Available on *NIX, *BSD, Windows, MacOS X.
>>>> Includes support for reliable RADIUS transport (RadSec),
>>>> and DIAMETER translation agent.
>>>> -
>>>> Nets: internetwork inventory and management - graphical,  
>>>> extensible,
>>>> flexible with hardware, software, platform and database  
>>>> independence.
>>>> -
>>>> CATool: Private Certificate Authority for Unix and Unix-like  
>>>> systems.
>>>>
>>>>
>>>> --
>>>> Archive at http://www.open.com.au/archives/radiator/
>>>> Announcements on radiator-announce at open.com.au
>>>> To unsubscribe, email 'majordomo at open.com.au' with
>>>> 'unsubscribe radiator' in the body of the message.
>>>
>>
>>
>>
>> NB:
>>
>> Have you read the reference manual ("doc/ref.html")?
>> Have you searched the mailing list archive (www.open.com.au/ 
>> archives/ radiator)?
>> Have you had a quick look on Google (www.google.com)?
>> Have you included a copy of your configuration file (no secrets),
>> together with a trace 4 debug showing what is happening?
>> Have you checked the RadiusExpert wiki:
>> http://www.open.com.au/wiki/index.php/Main_Page
>>
>> -- 
>> Radiator: the most portable, flexible and configurable RADIUS server
>> anywhere. Available on *NIX, *BSD, Windows, MacOS X.
>> Includes support for reliable RADIUS transport (RadSec),
>> and DIAMETER translation agent.
>> -
>> Nets: internetwork inventory and management - graphical, extensible,
>> flexible with hardware, software, platform and database independence.
>> -
>> CATool: Private Certificate Authority for Unix and Unix-like systems.
>>
>>
>> --
>> Archive at http://www.open.com.au/archives/radiator/
>> Announcements on radiator-announce at open.com.au
>> To unsubscribe, email 'majordomo at open.com.au' with
>> 'unsubscribe radiator' in the body of the message.



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list